Technical impact
The flaw permits authenticated Flowise users to inject arbitrary TypeORM Data several record manager and memory node components. By specifying a local JavaScript file in the entities array, an attacker can upload and execute malicious code on the server, which is a classic source‑code injection (CWE‑94). This enables an attacker to compromise confidentiality, integrity, and availability by running code with the server’s process privileges.
Affected Systems
The affected products are Flowise and Flowise components from FlowiseAI. Versions older than 3.1.3 that include MySQLRecordManager, PostgresRecordManager, SQLiteRecordManager, and MySQLAgentMemory modules are vulnerable; any deployment that exposes the additionalConfig option for those nodes is at risk.
Risk and Exploitability
The CVSS score of 9 indicates a critical severity, and the EPSS score of 3% suggests a low‑moderate likelihood of exploitation. The vulnerability is not listed in the KEV catalog. The attack requires authenticated access to the Flowise UI that allows upload and configuration of additionalConfig. Once an attacker uploads a JavaScript payload and references it, the code runs with server privileges, providing full control over the application.
Github GHSA