FlowiseAI

Wednesday, October 7

• GitHub CVE-2026-73483
  Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

  • FlowiseAI Flowise
  • Critical
  • CVSS 9.4
  • EPSS 0.62%
  • Fixed version listed
  16:17 UTC
• GitHub CVE-2026-73487
  Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

  • FlowiseAI Flowise
  • Critical
  • CVSS 9.0
  • EPSS 0.96%
  • Fixed version listed
  16:17 UTC