CVE-2026-6224 | nocobase plugin-workflow-javascript up to 2.0.23 Vm.js createSafeConsole sandbox

April 13, 2026 Yanac

A vulnerability, which was classified as critical, has been found in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in sandbox issue.

This vulnerability is identified as CVE-2026-6224. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More