{
 "id": "AIR-2026-0896",
 "slug": "cve-2026-69254-flowise-rce-via-nodevm-sandbox-escape-in-exec",
 "title": "CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode",
 "summary": "A sandbox escape flaw in Flowise allows authenticated users to override default NodeVM security options and execute arbitrary system commands. The vulnerability stems from improper handling of spread operators in JavaScript execution code.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-08-04",
 "incident_date_precision": "day",
 "first_reported": "2026-08-04",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-3769-jgqc-cxm7",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-69254: Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override",
   "published_at": "2026-08-04"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69254",
   "publisher": "NVD",
   "title": "CVE-2026-69254: Flowise is a drag & drop user interface to build a customized large language model flow.",
   "published_at": "2026-08-04"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-69254",
  "sandbox-escape",
  "rce",
  "flowise"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}