Description
Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to execute code in the unsandboxed pyodide environment with full system access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FlowiseAI | Flowise | < 3.1.3 | 3.1.3 |
Advisories 1
- WID-SEC-2026-2589 Flowise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026
References
- GitHub Security Advisory (GHSA-4878-cqgq-j53v) vendor-advisory
- VulnCheck Advisory: Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV third-party-advisory