DeutschShown in its original language — a full translation is planned for a future version.
Flowise: Mehrere Schwachstellen
view advisory published 2026-07-29
Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, erweiterte Privilegien zu erlangen, Sicherheitsmaßnahmen zu umgehen, Sitzungen zu kapern sowie Daten offenzulegen oder zu manipulieren.
01
describes (29)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73602US | critical9.9 | — | ||
Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale val… | ||||
| CVE-2026-73601US | high8.8 | — | ||
Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute… | ||||
| CVE-2026-73487US | critical9.8 | — | ||
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt i… | ||||
| CVE-2026-73486US | high8.8 | — | ||
Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. T… | ||||
| CVE-2026-73485US | high8.8 | — | ||
Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pyth… | ||||
| CVE-2026-73484US | high8.1 | — | ||
Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Au… | ||||
| CVE-2026-73483US | high8.8 | — | ||
Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access t… | ||||
| CVE-2026-70478US | critical10.0 | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:credentialId endpoint is includ… | ||||
| CVE-2026-70477US | critical9.8 | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatflow using a CSV Agent node can cause the… | ||||
| CVE-2026-70476US | high8.2 | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/ro… | ||||
| CVE-2026-70475US | medium6.5OT elevated | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoint in packages/server/src/routes/execu… | ||||
| CVE-2026-70474US | high8.1OT elevated | — | ||
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up crede… | ||||
| CVE-2026-70473US | high8.5OT elevated | — | ||
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-history returns the entire server-wid… | ||||
| CVE-2026-70472US | high8.8OT elevated | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-store endpoints accept a client-controlled… | ||||
| CVE-2026-70471US | medium6.5OT elevated | — | ||
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without re… | ||||
| CVE-2026-70470US | critical9.8 | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCod… | ||||
| CVE-2026-69264US | critical9.8 | — | ||
Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. B… | ||||
| CVE-2026-69263US | critical9.8 | Exploit | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but pac… | ||||
| CVE-2026-69262US | high8.1OT elevated | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, `DELETE /api/v1/chatflows/:id` authorized requests with checkAnyPermission(… | ||||
| CVE-2026-69259US | high8.8 | — | ||
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/S… | ||||
showing 20 of 29
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-3769-jgqc-cxm7 vom 2026-07-29external
- GitHub Security Advisory GHSA-4878-cqgq-j53v vom 2026-07-29external
- GitHub Security Advisory GHSA-4j8x-x6v7-w9rq vom 2026-07-29external
- GitHub Security Advisory GHSA-52fh-8v99-63c2 vom 2026-07-29external
- GitHub Security Advisory GHSA-5xvg-pmgg-3mxr vom 2026-07-29external
- GitHub Security Advisory GHSA-6vh2-wg4h-4vwj vom 2026-07-29external
- GitHub Security Advisory GHSA-88pr-878c-24wf vom 2026-07-29external
- GitHub Security Advisory GHSA-8r8h-6vcc-xhrv vom 2026-07-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan