CVE-2026-73487
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
Flowise <= 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist (validatePythonCodeForDataFrame()) to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an external server, perform SSRF against internal services, and potentially achieve further code execution -- all…
- No known exploitation
- Severity
- Critical, CVSS 9.0 (v4.0)
- EPSS
- 0.96% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
- Affected packages
- flowise (npm) <= 3.1.2, fixed in 3.1.3 · GHSA-w7x8-q2gp-5cgg
- flowise-components (npm) <= 3.1.2, fixed in 3.1.3 · GHSA-w7x8-q2gp-5cgg