How severe is CVE-2025-34267?

CVE-2025-34267 has a CVSS 3.x base score of 9.9, rated critical severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2025-34267 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (94th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-34267?

CVE-2025-34267 affects Flowiseai Flowise. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-34267?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2025-34267 have an EU (EUVD) identifier?

Yes. CVE-2025-34267 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-34455.

When was CVE-2025-34267 published?

CVE-2025-34267 was published on 2025-10-14 and last updated on 2026-10-05.

CVE-2025-34267

Q: What is CVE-2025-34267?

Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.

CVE-2025-34267 is a critical-severity vulnerability in Flowiseai Flowise with a CVSS 3.x base score of 9.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-77.

Key facts

Severity: Critical (CVSS 3.x base score 9.9)
CVSS v4: 8.4
EPSS exploit prediction: 7% (94th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-34455
Weakness: CWE-77
Affected product: Flowiseai Flowise
Published: 2025-10-14
Last modified: 2026-10-05

Description

Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.

Frequently asked questions

What is CVE-2025-34267?: Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecure use of integrated modules (Puppeteer and Playwright) within the nodevm execution environment. An authenticated attacker able to create or run a tool that leverages Puppeteer/Playwright can specify attacker-controlled browser binary paths and parameters. When the tool executes, the attacker-controlled executable/parameters are run on the host and circumvent the intended nodevm sandbox restrictions, resulting in execution of arbitrary code in the context of the host. This vulnerability was incorrectly assigned as a duplicate CVE-2025-26319 by the developers and should be considered distinct from that identifier.
How severe is CVE-2025-34267?: CVE-2025-34267 has a CVSS 3.x base score of 9.9, rated critical severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2025-34267 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (94th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-34267?: CVE-2025-34267 affects Flowiseai Flowise. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-34267?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2025-34267 have an EU (EUVD) identifier?: Yes. CVE-2025-34267 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-34455.
When was CVE-2025-34267 published?: CVE-2025-34267 was published on 2025-10-14 and last updated on 2026-10-05.

References

Affected products (1)

cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*

More vulnerabilities in Flowiseai Flowise

CVE-2026-70478 — Critical (CVSS 10.0): Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST…
CVE-2025-71338 — Critical (CVSS 10.0): Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated…
CVE-2025-59528 — Critical (CVSS 10.0): Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is…
CVE-2026-73602 — Critical (CVSS 9.9): Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated…
CVE-2026-67622 — Critical (CVSS 9.9): Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration…
CVE-2026-56274 — Critical (CVSS 9.9): Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP Server feature due to…

All CVEs affecting Flowiseai Flowise →

Other CWE-77 (Command Injection) vulnerabilities

CVE-2026-105484 — Critical (CVSS 10.0): A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the…
CVE-2026-105134 — Critical (CVSS 10.0): A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file…
CVE-2026-102240 — Critical (CVSS 10.0): A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file…
CVE-2026-101076 — Critical (CVSS 10.0): A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file…
CVE-2026-101075 — Critical (CVSS 10.0): A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of…
CVE-2026-101072 — Critical (CVSS 10.0): A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file…

Browse all CWE-77 (Command Injection) vulnerabilities →