PT-2024-40094 · Vm2+1 · Vm2+1

Published 2024-11-21 · Updated 2024-11-21

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Flowise (affected versions not specified)

Description: The issue allows developers to inject configuration into the Chainflow during execution through the overrideConfig option, which is supported in both the frontend web integration and the backend Prediction API. This feature has several security issues, including remote code execution, sandbox escape, denial of service by crashing the server, server-side request forgery, prompt injection, and data exfiltration. These issues can be exploited to gain full control over LLM prompts, alter the flow of a conversation, and exfiltrate server variables and data. The issues are self-targeted and do not persist to other users but leave the server and business exposed.

Recommendations:

• Disable the overrideConfig option by default.
• Implement an explicit allow list of variables that are allowed to be modified through the overrideConfig option.
• Remove vm2 and any forks of it, and replace it with a recommended alternative, such as isolated-vm.

Fix

Weakness Enumeration

CWE-15

Related Identifiers

GHSA-5CPH-WVM9-45GJ

Affected Products

Flowise

Vm2

References · 3

• https://osv.dev/vulnerability/GHSA-5cph-wvm9-45gj · Vendor Advisory
• https://github.com/FlowiseAI/Flowise · Note
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5cph-wvm9-45gj · Note