CVE-2024-58351
Last modified
CVE-2024-58351 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in both the frontend web integration and the backend Prediction API. Because this feature is enabled by default with no allow-list of permitted variables and relies on vm2 for sandboxing, an attacker can abuse it to achieve remote code execution and sandbox escape, denial of service by crashing the server, server-side request forgery, prompt injection, and server variable and data exfiltration. EPSS estimates a 0.65% chance of exploitation in the next 30 days.
Description
Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported in both the frontend web integration and the backend Prediction API. Because this feature is enabled by default with no allow-list of permitted variables and relies on vm2 for sandboxing, an attacker can abuse it to achieve remote code execution and sandbox escape, denial of service by crashing the server, server-side request forgery, prompt injection, and server variable and data exfiltration. These issues are self-targeted and do not persist to other users.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-58351?
How severe is CVE-2024-58351?
How do I fix CVE-2024-58351?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-58343Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows atta…4.3
- CVE-2024-58344Carbon Forum 5.9.0 contains a persistent cross-site scriptin…6.4
- CVE-2024-58348WordPress Background Image Cropper version 1.2 contains a re…9.8
- CVE-2024-58349WordPress Theme Travelscape 1.0.3 contains an arbitrary file…9.8
- CVE-2024-5835Heap buffer overflow in Tab Groups in Google Chrome prior to…8.8
- CVE-2024-58350Ghidra before 11.2 contains a use after free vulnerability i…4
- CVE-2024-58352Landray OA contains an unauthenticated HQL injection vulnera…8.7
- CVE-2024-58353Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is…9.3
- CVE-2024-58354cal.com (calcom repository, later renamed cal.diy) is affect…9.9
- CVE-2024-58355Cal.com (calcom/cal.diy) versions through 4.7.15 contain a s…9.3
- CVE-2024-58356SurrealDB before 2.1.4 silently fails to overwrite table def…2.3
- CVE-2024-58357SurrealDB versions before 2.1.0 contain an uncaught exceptio…7.1
Are you affected by CVE-2024-58351?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST