This vulnerability allows an authenticated attacker to escape the NodeVM sandbox by overriding the default security settings in executeJavaScriptCode(). The attacker can set nodeVMOptions.require.builtin to enable all built‑in modules, then call child_process to run arbitrary system commands as the Flowise server user, effectively hijacking the host system. The weakness corresponds to CWE-94, a code injection flaw that compromises confidentiality, integrity, and availability of the server.

The affected product is Flowise by FlowiseAI. Versions of Flowise released prior to 3.1.3 are vulnerable. All deployments that use executeJavaScriptCode() for custom function execution and have authenticated users capable of accessing the node‑custom‑functions endpoint can be impacted.

The CVSS score of 9.4 indicates a critical severity. While no EPSS value is provided, the lack of a KEV listing suggests exploitation may not yet be publicly observed, yet the vulnerability remains highly actionable. An attacker requires valid credentials to reach the node‑custom‑functions route, but once authenticated can execute arbitrary system commands with root privileges on the server. The attack vector is authenticated, local to the application, and hinges on permissive nodeVMOptions configuration. Given the severity, immediate mitigation is recommended.