SB2025040767 - Multiple vulnerabilities in Flowise

Description

This security bulletin contains information about 2 vulnerabilities.

1) Eval Injection (CVE-ID: CVE-2025-55346)

CWE-ID: CWE-95 - Eval Injection

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper neutralization of directives in dynamically evaluated code in the convertToValidJSONString function when processing the mcpServerConfig input in requests to /api/v1/node-load-method/customMCP. A remote attacker can send a specially crafted request to execute arbitrary code.

The injected JavaScript runs in the context of the host and is not sandboxed, which exposes the global process object and native Node.js modules such as child_process.

2) SQL Injection: Hibernate (CVE-ID: N/A)

CWE-ID: CWE-564 - SQL Injection: Hibernate

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to SQL injection in the importChatflows API when processing imported chatflow data. A remote privileged user can send a specially crafted import request with a malicious chatflow.id value to disclose sensitive information.

User interaction is required because a victim must import the crafted data.

Remediation

Install update from vendor's website.

References

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hmgh-466j-fx4c
• https://github.com/FlowiseAI/Flowise/commit/416e57380ea7ce2e66f89aded61b249ff3eef3b2
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9c4c-g95m-c8cp