critical9.8
CVE-2026-73487
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malici…
Impact
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | flowise | <= 3.1.2 | 3.1.3 |
| npm | flowise-components | <= 3.1.2 | 3.1.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flowiseai | Flowise | through 3.1.4 |