CVE-2025-34267 — Vulnerability in flowise — CVE Details

HIGH

Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages

Published October 14, 2025Updated October 29, 2025Source: osv

Summary

Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. **NOTE**: This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 and should be considered distinct from that identifier.

Advisory Timeline

First published October 14, 2025 (363 days ago).
Last revised October 29, 2025 — 14 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

npm

Update flowise to 3.0.8 or later

npm install flowise@3.0.8

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: npm (1).

Package	Ecosystem	Affected	Fixed In
flowise	npm	All versions	3.0.8

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-77
View on MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.0 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L

References

Frequently Asked Questions

What is CVE-2025-34267?: Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.0/10).
How do I check if my project is affected by CVE-2025-34267?: CVE-2025-34267 affects flowise. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-34267 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.0

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-r4hh-pcgx-j5r2

GHSA-5w3r-f6gm-c25w

Related CVEs

CVE-2025-71338
CRITICAL
Flowise allows arbitrary file write to RCE
CVE-2025-50538
CRITICAL
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
CVE-2025-71324
CRITICAL
Flowise has an Arbitrary File Read
CVE-2026-73483
CRITICAL
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium
CVE-2026-46442
CRITICAL
FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
CVE-2026-41137
CRITICAL
Flowise: Code Injection in CSVAgent leads to Authenticated RCE
CVE-2026-40933
CRITICAL
Flowise: Authenticated RCE Via MCP Adapters
CVE-2026-70472
HIGH
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies