CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE
Authenticated attackers can escape the vm2 sandbox to execute arbitrary code via a path traversal bypass in Flowise.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-73602?
CVE-2026-73602 is a critical code injection vulnerability in Flowiseai Flowise, published on 13 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to load and execute malicious JavaScript files stored in the document store outside the sandbox.
Weakness: CWE-95
Which versions are affected by CVE-2026-73602?
It affects 1 product.
Products include Flowiseai Flowise.
How do I fix CVE-2026-73602?
No fix has been published for CVE-2026-73602 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-73602 being exploited?
There is no known exploitation of CVE-2026-73602 in the wild and no public exploit code.
Other vulnerabilities in Flowiseai Flowise
- CVE-2025-71338 Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API
- CVE-2026-40933 Flowise: Authenticated RCE Via MCP Adapters
- CVE-2025-61913 Flowise is vulnerable to arbitrary file read, arbitrary file write
- CVE-2025-59528 Flowise has Remote Code Execution vulnerability
- CVE-2026-52098 Code injection in n/a
Sources
Also known as GHSA-56h4-p63w-w4wm, GHSA-rqh4-rxw3-93rp.