{ "schemaVersion": 1, "site": "https://cveboard.org", "generatedAt": "2026-10-23T20:15:20.010Z", "lastRun": "2026-10-23T20:01:03.754Z", "liveDays": 14, "filters": { "kind": null, "exploited": false, "severity": null, "ecosystems": [], "tag": "flowiseai" }, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "incidents": [ { "id": "cve-2026-73487", "url": "https://cveboard.org/i/cve-2026-73487", "urlPt": "https://cveboard.org/pt/i/cve-2026-73487", "json": "https://cveboard.org/i/cve-2026-73487.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass", "summary": "Flowise <= 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist (validatePythonCodeForDataFrame()) to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an external server, perform SSRF against internal services, and potentially achieve further code execution -- all…", "titlePt": "Injeção de prompt no Flowise para RCE e SSRF via contorno do validador do agente CSV/Airtable Python", "summaryPt": "Os nós CSV Agent e Airtable Agent do Flowise <= 3.1.2 usam uma lista de bloqueio baseada em regex (validatePythonCodeForDataFrame()) para sanitizar o código Python gerado pelo LLM antes da execução no Pyodide. O validador possui múltiplos contornos estruturais que permitem a um atacante exfiltrar todos os dados carregados para um servidor externo, realizar SSRF contra serviços internos e potencialmente alcançar execução adicional de código -- tudo…", "affected": [], "omitted": 0, "references": [ { "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-w7x8-q2gp-5cgg", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-08-14T22:26:23.902Z" }, "fix": "listed", "tags": [ "flowiseai", "npm" ], "cves": [ "CVE-2026-73487" ], "ghsa": "GHSA-w7x8-q2gp-5cgg", "cvss": { "score": 9, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00961, "percentile": 0.61218, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "flowise", "vulnerable": "<= 3.1.2", "fixed": "3.1.3", "advisory": "GHSA-w7x8-q2gp-5cgg" }, { "ecosystem": "npm", "name": "flowise-components", "vulnerable": "<= 3.1.2", "fixed": "3.1.3", "advisory": "GHSA-w7x8-q2gp-5cgg" } ], "vendor": "FlowiseAI", "product": "Flowise", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-w7x8-q2gp-5cgg" } ], "cvePending": true, "publishedAt": "2026-10-07T16:17:21.000Z", "updatedAt": "2026-10-07T16:17:21.000Z" }, { "id": "cve-2026-73483", "url": "https://cveboard.org/i/cve-2026-73483", "urlPt": "https://cveboard.org/pt/i/cve-2026-73483", "json": "https://cveboard.org/i/cve-2026-73483.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium", "summary": "Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and args parameters to puppeteer.launch(), which internally invokes child_process.", "titlePt": "Fuga de sandbox Flowise NodeVM via allowlist do puppeteer - execução remota de código autenticada e leitura arbitrária de arquivos via Chromium", "summaryPt": "Flowise (pacotes flowise e flowise-components) nas versões <= 3.1.2 contém uma fuga de sandbox no sandbox JavaScript vm2/@flowiseai/nodevm. Um usuário autenticado com acesso ao endpoint /api/v1/node-custom-function pode escapar da sandbox fornecendo os parâmetros executablePath e args controlados pelo atacante para puppeteer.launch(), que internamente invoca child_process.", "affected": [], "omitted": 0, "references": [ { "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9gvv-qjj3-2p6g", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-08-14T22:25:16.050Z" }, "fix": "listed", "tags": [ "flowiseai", "npm" ], "cves": [ "CVE-2026-73483" ], "ghsa": "GHSA-9gvv-qjj3-2p6g", "cvss": { "score": 9.4, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00621, "percentile": 0.4916, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "flowise", "vulnerable": "<= 3.1.2", "fixed": "3.1.3", "advisory": "GHSA-9gvv-qjj3-2p6g" }, { "ecosystem": "npm", "name": "flowise-components", "vulnerable": "<= 3.1.2", "fixed": "3.1.3", "advisory": "GHSA-9gvv-qjj3-2p6g" } ], "vendor": "FlowiseAI", "product": "Flowise", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-9gvv-qjj3-2p6g" } ], "cvePending": true, "publishedAt": "2026-10-07T16:17:02.000Z", "updatedAt": "2026-10-07T16:17:02.000Z" } ], "tag": { "tag": "flowiseai", "name": "FlowiseAI", "kev": null } }