{
  "schemaVersion": 1,
  "incident": {
    "id": "cve-2026-73487",
    "url": "https://cveboard.org/i/cve-2026-73487",
    "urlPt": "https://cveboard.org/pt/i/cve-2026-73487",
    "json": "https://cveboard.org/i/cve-2026-73487.json",
    "kind": "vuln",
    "live": false,
    "knownExploited": false,
    "severity": "critical",
    "title": "Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass",
    "summary": "Flowise <= 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist (validatePythonCodeForDataFrame()) to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an external server, perform SSRF against internal services, and potentially achieve further code execution -- all…",
    "titlePt": "Injeção de prompt no Flowise para RCE e SSRF via contorno do validador do agente CSV/Airtable Python",
    "summaryPt": "Os nós CSV Agent e Airtable Agent do Flowise <= 3.1.2 usam uma lista de bloqueio baseada em regex (validatePythonCodeForDataFrame()) para sanitizar o código Python gerado pelo LLM antes da execução no Pyodide. O validador possui múltiplos contornos estruturais que permitem a um atacante exfiltrar todos os dados carregados para um servidor externo, realizar SSRF contra serviços internos e potencialmente alcançar execução adicional de código -- tudo…",
    "cves": [
      "CVE-2026-73487"
    ],
    "ghsa": "GHSA-w7x8-q2gp-5cgg",
    "cvss": {
      "score": 9,
      "version": "4.0"
    },
    "epss": {
      "percentage": 0.00961,
      "percentile": 0.6055,
      "asOf": "2026-10-23"
    },
    "packages": [
      {
        "ecosystem": "npm",
        "name": "flowise",
        "vulnerable": "<= 3.1.2",
        "fixed": "3.1.3",
        "advisory": "GHSA-w7x8-q2gp-5cgg"
      },
      {
        "ecosystem": "npm",
        "name": "flowise-components",
        "vulnerable": "<= 3.1.2",
        "fixed": "3.1.3",
        "advisory": "GHSA-w7x8-q2gp-5cgg"
      }
    ],
    "vendor": null,
    "product": null,
    "kev": null,
    "breach": null,
    "retracted": false,
    "sources": [
      {
        "label": "GitHub Advisory Database",
        "url": "https://github.com/advisories/GHSA-w7x8-q2gp-5cgg"
      }
    ],
    "publishedAt": "2026-10-07T16:17:21.000Z",
    "updatedAt": "2026-10-07T16:17:21.000Z"
  },
  "live": false,
  "events": [
    {
      "id": "ghsa:GHSA-w7x8-q2gp-5cgg:ghsa_published:2026-10-07T16:17:21.000Z",
      "incidentId": "cve-2026-73487",
      "type": "ghsa_published",
      "at": "2026-10-07T16:17:21.000Z",
      "detail": {
        "ghsa": "GHSA-w7x8-q2gp-5cgg",
        "severity": "critical",
        "fixed": "3.1.3"
      }
    }
  ]
}