dhananjayasj/cve-2026-34156-nocobase-sandbox-escape-via-workflow-execution-vulnerability-Authenticated RCE exploit for NocoBase workflow engine sandbox escape (CVE-2026-34156). Executes arbitrary system commands via crafted workflow expressions on vulnerable servers.
-orange){kind=icon}
Authenticated Remote Code Execution in NocoBase versions ≤ 2.0.26 via workflow sandbox escape.
CVE-2026-34156 is a sandbox escape vulnerability in the NocoBase workflow engine. An authenticated attacker can create a malicious workflow that bypasses the expression sandbox and executes arbitrary system commands on the underlying server.
Clone the repository and install dependencies:
git clone https://github.com/0xBlackash/CVE-2026-34156.git
cd CVE-2026-34156
pip3 install requests