CVE-2026-69259 Flowise RCE via SQLite Record Manager Node
An authenticated attacker can achieve remote code execution by manipulating SQLite configuration to inject shell commands into Chromium startup files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-69259?
CVE-2026-69259 is a critical code injection vulnerability in Flowiseai Flowise, published on 4 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended database setting, allowing additionalConfig.database to overwrite the SQLite database path. An authenticated attacker using the published Docker image, which ran as root, could write a SQLite database to paths such as /etc/chromium/exploit.conf; by controlling the table name and namespace value, the attacker could place shell syntax into the database file and trigger execution when Puppeteer launched Chromium and sourced /etc/chromium/*.conf. This issue is fixed in version 3.1.3.
Weakness: CWE-94
Which versions are affected by CVE-2026-69259?
4 open source packages ship an affected version, including flowise and flowise-components. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
flowise npm | All versions | 3.1.3 |
flowise npm | All versions | 3.1.3 |
flowise-components npm | All versions | 3.1.3 |
flowise-components npm | All versions | 3.1.3 |
Products include Flowiseai Flowise.
How do I fix CVE-2026-69259?
Upgrade flowise to 3.1.3 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-69259 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-69259 exists.
Other vulnerabilities in Flowiseai Flowise
- CVE-2025-71338 Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API
- CVE-2026-40933 Flowise: Authenticated RCE Via MCP Adapters
- CVE-2025-61913 Flowise is vulnerable to arbitrary file read, arbitrary file write
- CVE-2025-59528 Flowise has Remote Code Execution vulnerability
- CVE-2026-52098 Code injection in n/a
Sources
Also known as GHSA-x3hf-7cj6-3r4m.