CVE-2025-34267

HIGH

Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages

Published October 14, 2025Updated October 29, 2025Source: osv

Summary

Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. **NOTE**: This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 and should be considered distinct from that identifier.

Remediation

Upgrade to the fixed version using your package manager.

npm

Update flowise to 3.0.8 or later

npm install flowise@3.0.8

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Package	Ecosystem	Affected	Fixed In
flowise	npm	All versions	3.0.8

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-77
View on MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.0 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L

References

Frequently Asked Questions

What is CVE-2025-34267?: Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.0/10).
How do I check if my project is affected by CVE-2025-34267?: CVE-2025-34267 affects flowise. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-34267 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.0

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-r4hh-pcgx-j5r2

GHSA-5w3r-f6gm-c25w

Related CVEs

CVE-2025-8943
CRITICAL
Flowise OS command remote code execution
CVE-2025-71334
CRITICAL
Flowise has arbitrary file access due to missing chat flow id validation
CVE-2026-70478
CRITICAL
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
CVE-2026-41265
CRITICAL
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability
CVE-2026-69255
CRITICAL
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
CVE-2025-58434
CRITICAL
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
CVE-2026-41274
HIGH
Flowise: Cypher Injection in GraphCypherQAChain
CVE-2026-46479
HIGH
FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies