CVE-2026-69251

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3

Description Flowise record manager and agent memory nodes allow authenticated users to set arbitrary TypeORM DataSource options via the additionalConfig input. This occurs in the following components:

Because TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, an attacker can upload a malicious JavaScript payload and reference it through the additionalConfig.entities variable to execute arbitrary code on the server, leading to a full application compromise. The exploitation process involves using the POST /api/v1/auth/login endpoint to obtain organization details and the POST /api/v1/document-store/loader/process/{loader id} endpoint to upload the payload.

Recommendations Update Flowise to version 3.1.3. As a temporary mitigation, restrict or disable the use of the additionalConfig input in record manager and agent memory nodes to prevent the configuration of entities, subscribers, migrations, and extra options.