Javascript store object by reference.
So setting flow to a variable sets the variable to reference the same memory. If you then alter either the other will reference the new value.
you will need to clone it using RED.util.cloneMessage(flow.get("string"))