CVE-2025-34267: Flowise Sandbox Escape and RCE Vulnerability

# CVE-2025-34267: Flowise Sandbox Escape and RCE Vulnerability

https://gcdradar.vercel.app/incidents/cve-2025-34267-flowise-sandbox-escape-and-rce-vulnerability · AIR-2025-0034 · closed 2025-10-14

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-10-14
- AI role: Attack on AI
- Products: Flowise
- CVE ids: CVE-2025-34267
- CVSS: 8.4

## Summary

Flowise versions prior to 3.0.8 contain a node VM sandbox escape vulnerability allowing authenticated attackers to execute arbitrary code. The flaw stems from insecure use of integrated Puppeteer and Playwright modules.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-10-14: CVE-2025-34267: Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages (https://github.com/advisories/GHSA-r4hh-pcgx-j5r2)
- 2025-10-14: CVE-2025-34267: Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution… (https://nvd.nist.gov/vuln/detail/CVE-2025-34267)

## Sources

- 2025-10-14 NVD: CVE-2025-34267: Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution… https://nvd.nist.gov/vuln/detail/CVE-2025-34267
- 2025-10-14 GitHub Advisory Database: CVE-2025-34267: Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages https://github.com/advisories/GHSA-r4hh-pcgx-j5r2

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.