A critical sandbox escape vulnerability in NocoBase allows unauthenticated remote attackers to achieve arbitrary code execution on the host server.

The vulnerability resides in the createSafeConsole function within packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js, where incomplete sanitization of the console object prototype chain allows an attacker to recover the host Function constructor and escape the VM isolation. This flaw can be triggered remotely by any user capable of executing a JavaScript workflow node, including via the built-in test run functionality.

Successful exploitation of this vulnerability grants an attacker full control over the host environment where NocoBase is running, leading to complete system compromise. Given the CVSS score of 7.3, this represents a high-severity risk that could result in unauthorized data access, lateral movement within the internal network, and significant operational disruption.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the workflow creation and testing features to trusted users only. Disable the plugin-workflow-javascript component if it is not strictly required for business operations until a security update is released by the vendor.

Proactive Monitoring: Monitor server access logs and workflow execution logs for suspicious JavaScript payloads, specifically looking for attempts to access the process object or prototype chain properties. Review all recently created or modified workflows for unauthorized or anomalous scripts.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect API requests to the /api/flow_nodes:test endpoint, blocking requests that contain suspicious JavaScript keywords such as Object.getPrototypeOf, constructor, or process. Ensure the NocoBase application is running with the least privilege necessary, ideally within a containerized environment with strictly limited host access.

Public Exploit Available: Yes — a detailed proof-of-concept and technical analysis are available via the referenced GitHub security draft.

This vulnerability presents a severe risk due to the ease of exploitation and the potential for full system compromise. Organizations using NocoBase must prioritize the isolation of the workflow engine and restrict access to authorized personnel immediately. Monitor vendor communications closely for the release of a security patch and apply it as soon as it becomes available to permanently remediate this flaw.