CVE-2026-73487
CriticalCVSS 9.0Summary
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection.
Risk Assessment
An unauthenticated attacker can exfiltrate data, perform SSRF against internal services, or achieve code execution on the server.
Recommendation
Update Flowise to version 3.1.3 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API.