Code Injection in Flowise CSV Agent by FlowiseAI
CVE-2026-73486

9CRITICAL

Key Information:

Vendor

Flowiseai

Status
Flowise
Vendor
CVE Published:
13 August 2026

What is CVE-2026-73486?

Flowise versions prior to 3.1.3 are susceptible to a code injection vulnerability found in the CSV Agent node's customReadCSV parameter. Authenticated users can exploit this flaw to execute arbitrary Python code. The existing validator uses a static regex blocklist that can be circumvented through various obfuscation techniques, which allows attackers to run code in the unsandboxed pyodide environment, potentially compromising the system's integrity and security.

Affected Version(s)

Flowise 0 < 3.1.3

Flowise 0 < 3.1.3

Flowise 3.1.3

References

https://github.com/FlowiseAI/Flowise/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/flowise-before-code-...
third-party-advisory

CVSS V4

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zdi-disclosures
.