CVE-2026-73487

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3

Description A regex-based Python code validator bypass exists in the CSV and Airtable Agent nodes. This allows unauthenticated attackers to inject malicious code through prompt injection. By exploiting unblocked pandas functions, such as pd.read json(), attackers can exfiltrate datasets, perform Server-Side Request Forgery (SSRF)—a technique used to make the server perform requests to internal or external resources—against internal services, or achieve remote code execution via the unauthenticated prediction API endpoint.

Recommendations Update to version 3.1.3 or later.