CVE-2026-73483

GitHubCritical, npm

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and args parameters to puppeteer.launch(), which internally invokes child_process.

No known exploitation
Severity: Critical, CVSS 9.4 (v4.0)
EPSS: 0.62% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
Affected packages: flowise (npm) <= 3.1.2, fixed in 3.1.3 · GHSA-9gvv-qjj3-2p6g
flowise-components (npm) <= 3.1.2, fixed in 3.1.3 · GHSA-9gvv-qjj3-2p6g