CVE-2026-73486

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3

Description Authenticated attackers can execute arbitrary Python code via the customReadCSV parameter in the CSV Agent node. The issue stems from a validator that relies on a static regex blocklist, which can be bypassed using obfuscation techniques. This allows for code execution within the unsandboxed pyodide environment, providing full system access.

Recommendations Update to version 3.1.3 or later. As a temporary mitigation, restrict access to the customReadCSV parameter in the CSV Agent node.