Executive brief
Flowise is an open-source platform for building AI agents through a visual interface. This vulnerability allows network attackers to execute arbitrary JavaScript code on the host system by sending a specially crafted POST request. An attacker can bypass sandboxing and gain full control over the server, potentially compromising sensitive data, disrupting operations, or using it as a foothold for further attacks.
Technical details
The vulnerability exists in Flowise's dynamic Function constructor implementation, which unsafely processes user-controlled input (CWE-94: Improper Control of Generation of Code). An attacker can exploit this by sending a POST request with malicious JavaScript code that gets passed to the Function constructor, allowing arbitrary code execution in an unsandboxed context on the host. No authentication or user interaction is required—an unauthenticated network attacker can trigger the vulnerability directly. The vulnerability affects all versions of Flowise up to and including version 3.0.5. This advisory is a duplicate of GHSA-hmgh-466j-fx4c; refer to the primary advisory for patch details.
Affected products
- FlowiseAI Flowise 0 through 3.0.5
Timeline
- 2025-08-14: disclosed
- 2025-10-03: other: Advisory withdrawn as duplicate of GHSA-hmgh-466j-fx4c