by Kastro
Paper/Archive/CVE-2026-73485

CVE-2026-73485

FlowiseAI Flowise — Flowise before 3.1.3 Remote Code Execution via Airtable Agent

EPSS 0.6%CVSS 9.0
critical.is priorityof 100
37
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 48.6.486 × 209.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.

Affected

ProductAffectedFixed inSource
Flowise< 3.1.33.1.3CNA
Flowise< 3.1.33.1.3CNA

Scores by source

VulnCheck (CNA)9.0CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/FlowiseAI/Flowise/security/advisories/GHSA-c5hr-rc98-xp3gwriteupvulncheck.com/advisories/flowise-before-remote-code-execution-via-airtable-agent