Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-r4hh-pcgx-j5r2
Advisory ID github_osv/GHSA-r4hh-pcgx-j5r2
Aliases CVE-2025-34267
Summary Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. **NOTE**: This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 and should be considered distinct from that identifier.
Status Published
Exploitability 0.5
Weighted Severity 7.6
Risk 3.8
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
System Score Found at
cvssv4 8.4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-r4hh-pcgx-j5r2/GHSA-r4hh-pcgx-j5r2.json
generic_textual HIGH
Reference id Reference type URL
https://flowiseai.com
https://github.com/FlowiseAI/Flowise
https://github.com/FlowiseAI/Flowise/pull/5231
https://www.vulncheck.com/advisories/flowise-auth-command-execution-and-sandbox-bypass-via-puppeteer-and-playwright-packages
CVE-2025-34267 https://nvd.nist.gov/vuln/detail/CVE-2025-34267
GHSA-5w3r-f6gm-c25w https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5w3r-f6gm-c25w
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-r4hh-pcgx-j5r2/GHSA-r4hh-pcgx-j5r2.json
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-14T20:32:58Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2025/34xxx/CVE-2025-34267.json

Source Advisory: vulnrichment/CVE-2025-34267

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-14T20:32:58Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2025/34xxx/CVE-2025-34267.json

Source Advisory: vulnrichment/CVE-2025-34267

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]