Arbitrary Python Execution Vulnerability in Flowise by FlowiseAI
CVE-2026-70470

9.5CRITICAL

Key Information:

Vendor

Flowiseai

Status
Flowise
Vendor
CVE Published:
4 August 2026

What is CVE-2026-70470?

The Flowise product features a drag & drop interface for customizing large language model flows. Prior to version 3.1.3, a flaw exists in the validation of Python code within the application. Specifically, the validatePythonCodeForDataFrame function allowed for the bypassing of security measures through the use of Unicode homoglyph identifiers. This enabled attackers to execute arbitrary Python code within the Pyodide environment and attain full command execution on the host system utilizing the Pyodide JavaScript module. The failure arises from an ASCII word-boundary blacklist which does not account for Unicode representations. This vulnerability has since been addressed in Flowise version 3.1.3.

Affected Version(s)

Flowise < 3.1.3

References

https://github.com/FlowiseAI/Flowise/security/advisories/...
x_refsource_CONFIRM
https://github.com/FlowiseAI/Flowise/pull/6499
x_refsource_MISC
https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576...
x_refsource_MISC

CVSS V4

Score:
9.5
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.