CVE-2025-34267: Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages
Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOWBUILTINDEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host.
NOTE: This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 and should be considered distinct from that identifier.
Other sources
Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOWBUILTINDEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/flowiseto a version that resolves this vulnerability.Fixed in 3.0.8 - Upgrade
Upgrade
Flowiseto a version that resolves this vulnerability.Fixed in 3.0.8 - Configuration
Disable ALLOW_BUILTIN_DEP to prevent authenticated RCE and node VM sandbox escape via Puppeteer/Playwright integrated modules.
Flowise ALLOW_BUILTIN_DEP = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34267?
CVE-2025-34267 has been identified as a critical vulnerability due to its potential for authenticated remote code execution.
How do I fix CVE-2025-34267?
To mitigate CVE-2025-34267, upgrade Flowise to version 3.0.8 or later and ensure 'ALLOW_BUILTIN_DEP' is disabled.
What impact does CVE-2025-34267 have on affected systems?
CVE-2025-34267 can allow attackers to execute arbitrary code on the server through authenticated user sessions, compromising system integrity.
Is CVE-2025-34267 present in all versions of Flowise?
CVE-2025-34267 affects versions of Flowise from 3.0.1 to 3.0.7 and all later versions if 'ALLOW_BUILTIN_DEP' is enabled.
Who is affected by CVE-2025-34267?
Users and administrators of Flowise versions between 3.0.1 and 3.0.7 with 'ALLOW_BUILTIN_DEP' enabled are at risk due to CVE-2025-34267.