Vulnerability record · CVE-2026-73486 · published 13 August 2026

CVE-2026-73486: Flowiseai flowise code injection vulnerability

Flowiseai · Flowise

Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to execute code in the unsandboxed pyodide environment with full system access.

9.0 CVSS 4.0 Critical EPSS 0.66% · top 50.3% CWE-94 · Code injection

9.0CVSS 4.0 base score

0.66%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

3References, 2 tagged exploit

3 Sep 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Flowise Flowiseai

References

Link	Tags
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4878-cqgq-j53v	ExploitVendor Advisory
https://www.vulncheck.com/advisories/flowise-before-code-injection-via-csv-agent-customreadcsv	Third Party Advisory
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4878-cqgq-j53v	ExploitVendor Advisory

Track CVE-2026-73486 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2025-71338Flowiseai flowise vulnerabilityFlowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthenticated attackers to write files outsid…EPSS 1.2%25 Jun 2026 10.0CVE-2025-59528Flowise CustomMCP node code injection enables remote code executionFlowise 3.0.5 passes user-supplied mcpServerConfig input directly into the JavaScript Function() constructor inside convertToValidJSONString, with no…EPSS 86%analysed22 Sep 2025 9.9CVE-2026-40933Flowiseai flowise os command injection vulnerabilityFlowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, due to unsafe serialization of stdio command…EPSS 1.3%21 Apr 2026 9.9CVE-2025-61913Flowiseai flowise path traversal vulnerabilityFlowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool i…EPSS 13%8 Oct 2025 9.8CVE-2026-52098Flowiseai flowise code injection vulnerabilityAn issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpointEPSS 1.1%10 Sep 2026 9.8CVE-2026-41267Flowiseai flowise insecure direct object reference vulnerabilityFlowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mass assignment (JSON injection)…EPSS 0.48%23 Apr 2026 9.8CVE-2026-41268Flowiseai flowise improper input validation vulnerabilityFlowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vulnerable to a critical unauthen…EPSS 1.2%23 Apr 2026 9.8CVE-2025-58434Flowise forgot-password endpoint leaks reset token, enabling account takeoverFlowise 3.0.5 and earlier returns a valid password reset tempToken and sensitive account details from the forgot-password endpoint without authentica…EPSS 50%analysed12 Sep 2025

Source: NIST National Vulnerability Database (record CVE-2026-73486), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.