CVE-2026-73487: Flowiseai Flowise

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API.

Affected products

• Flowiseai Flowise: up to and including 3.1.4

Published 2026-08-13. Last modified 2026-09-03.