Flowise sandbox escape lets authenticated users run OS commands

high severity · published 2026-08-13

An authenticated user of the node custom function endpoint can escape the JavaScript sandbox and run arbitrary OS commands as the Flowise process user, which is root in the official Docker image. The same flaw lets them read arbitrary host files through Chromium's file URL handling.

CVE: CVE-2026-73483

Source: NVD

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 165 and your operating system.