# CVE-2026-46442: Flowise - RCE

> Live exploitation tracking for CVE-2026-46442 by the CrowdSec Live Exploit Tracker, built from real-world attack data crowdsourced from CrowdSec's global network.

Page: https://tracker.crowdsec.net/cves/CVE-2026-46442

## Key facts

- **Exploitation phase:** Limited Exploitation. The vulnerability is known but shows very limited attacker interest or exploitation activity.
- **CVSS score:** 9.4
- **Public exploit available:** Yes
- **Affected products:** FlowiseAI Flowise
- **Weaknesses:** CWE-94 (Improper Control of Generation of Code ('Code Injection'))
- **Tags:** web_application, nodejs, ai_mcp

## Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When E2B_APIKEY is not configured — the common deployment case — Flowise executes this code inside a NodeVM sandbox. This sandbox can be escaped, allowing an attacker to reach the host process object and execute system commands via child_process. The result is authenticated remote code execution on the Flowise server host. This issue has been patched in version 3.1.2.

## CrowdSec analysis

[CVE-2026-46442](https://euvd.enisa.europa.eu/vulnerability/CVE-2026-46442) is a critical remote code execution vulnerability in Flowise versions prior to 3.1.2, caused by missing route-level authorization on the Custom JS Function endpoint and an escapable NodeVM sandbox. An authenticated user or API key can submit malicious JavaScript, escape the sandbox, and execute system commands on the Flowise server, potentially resulting in full compromise of the host and connected systems.

CrowdSec has been tracking this vulnerability and its exploits since 3rd of August 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2026-46442 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers target the `/api/v1/node-custom-function` endpoint with an authenticated JSON POST request containing malicious JavaScript in the `functionBody` field. The payload invokes `child_process` to execute system commands, often validated through an external DNS callback.

## Timeline

- 2026-06-08: CVE Published. CVE-2026-46442 is published to NVD.
- 2026-08-03: Rule Released. CrowdSec releases a rule to detect CVE-2026-46442 exploitation attempts against the CrowdSec Network.
- 2026-09-04: CrowdSec First Seen. CrowdSec observes in-the-wild exploitation of CVE-2026-46442 for the first time.

## References

- https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.1.2
- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46442.yaml

## Live exploitation data

The [Live Exploit Tracker page](https://tracker.crowdsec.net/cves/CVE-2026-46442) follows observed exploitation activity for CVE-2026-46442. [Request an API key](https://tracker.crowdsec.net/request-api-key) for full access to its exploitation timeline, attacking IP addresses and blocklists.