by Kastro
Paper/Archive/CVE-2026-69259

CVE-2026-69259

FlowiseAI Flowise — Flowise RCE via SQLite Record Manager Node

EPSS 0.8%public exploitCVSS 9.4
critical.is priorityof 100
50
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 57.3.573 × 2011.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended database setting, allowing additionalConfig.database to overwrite the SQLite database path. An authenticated attacker using the published Docker image, which ran as root, could write a SQLite database to paths such as /etc/chromium/exploit.conf; by controlling the table name and namespace value, the attacker could place shell syntax into the database file and trigger execution when Puppeteer launched Chromium and sourced /etc/chromium/*.conf. This issue is fixed in version 3.1.3.

Affected

ProductAffectedFixed inSource
Flowise< 3.1.3–CNA

Scores by source

GitHub_M (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4mrefgithub.com/FlowiseAI/Flowise/pull/6464refgithub.com/FlowiseAI/Flowise/commit/d07186844263bad057008863037466aff7c3390frefgithub.com/FlowiseAI/Flowise/releases/tag/[email protected]