Flowise RCE via TypeORM DataSource
- Product
- FlowiseAI/Flowise
- CVE
- CVE-2026-69251
- Affected
- npm/flowise <= 3.1.2, npm/flowise-components <= 3.1.2
- Fixed in
- 3.1.3
Last verified against sources: October 26, 2026
Am I affected?
FlowiseAI/Flowise: affected npm/flowise <= 3.1.2, npm/flowise-components <= 3.1.2. Fixed in 3.1.3.
- Check your version: run
npm ls flowise. Versions <= 3.1.2 of flowise are affected. [1] - Check your version: run
npm ls flowise-components. Versions <= 3.1.2 of flowise-components are affected. [1]
What to do now
- Upgrade to the fixed version: run
npm install flowise@3.1.3(first patched version 3.1.3). [1] - Upgrade to the fixed version: run
npm install flowise-components@3.1.3(first patched version 3.1.3). [1] - Do not allow users full control of the options for the TypeORM
DataSourceclass. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- Flowise allows users to connect to remote databases within a flow, which is performed using the TypeORM
DataSource. [1] - The following nodes allowed users to set arbitrary options for the TypeORM
DataSourceclass using theadditionalConfignode input. [1] - This is considered a dangerous coding practice, because the options for the TypeORM
DataSourceclass support loading local files as JavaScript code. [1]
Impact
- This sandbox escape vulnerability allows an authenticated user to execute arbitrary code on a server running Flowise, resulting in full compromise of the application. [1]
What was done
Sources
- GHSA-g32j-mmxr-gfq5 — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
[CVE-2026-69251] Flowise RCE via TypeORM DataSource
Product: FlowiseAI/Flowise | Affected: npm/flowise <= 3.1.2, npm/flowise-components <= 3.1.2 | Fixed in: 3.1.3
Summary: Flowise allows users to connect to remote databases within a flow, which is performed using the TypeORM `DataSource`.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/08/cve-2026-69251-flowiseai-flowiseCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for CVE-2026-69251
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.