OS Command Injection in Flowise - #VU146553

Vulnerability details

The vulnerability allows a remote user to inject commands into GitHub Actions Docker image build workflows and disclose sensitive credentials.

The vulnerability exists due to command injection in GitHub Actions workflow_dispatch input handling in Docker image build workflows when processing user-supplied workflow inputs interpolated into run: blocks. A remote privileged user can supply crafted input containing shell metacharacters to inject commands into the workflow and disclose sensitive credentials.

Exploitation requires write access to the repository and the ability to trigger the affected workflows through workflow_dispatch. Exposed secrets may include AWS credentials, Docker Hub tokens, and an AWS OIDC IAM role.

Affected software

Remediation

External References

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jrcq-qjw5-xx5q

Related Security Bulletins

• Multiple vulnerabilities in Flowise