Flowise CSVAgent lets authenticated users run code on the server

high severity · published 2026-08-04

An authenticated attacker can inject Python code through CSV data handled by the CSVAgent, escape into the Pyodide runtime, and reach the Node.js bridge to execute code on the host running Flowise. This bypasses the code validation check, which only inspects later LLM-generated code and not the initial generated block.

Fixed in: 3.1.3

CVE: CVE-2026-69255

Source: NVD

Am I affected?

You are affected if the installed version is older than 3.1.3. Check the version you have and update to 3.1.3 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 115 and your operating system.