CVE-2026-70477

Katalog CVE

CVSS 9.8 · Critical EPSS 0,81%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada flowiseai flowise. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatflow using a CSV Agent node can cause the LLM to respond with a malicious Python script that bypasses the blocklist validator and executes in an unsandboxed Pyodide environment. The specific flaw exists within the run method of the CSV_Agents class, where untrusted data is used to construct an LLM prompt and the resulting pythonCode is validated by validatePythonCodeForDataFrame before execution. An attacker can leverage this to execute arbitrary code in the context of the service account. This issue is fixed in 3.1.3.

Rincian

Terbit di NVD

4 Agustus 2026

Terakhir diubah

11 September 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,81% peluang dieksploitasi; lebih tinggi dari 55,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr advisory vendor
• https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c patch
• https://github.com/FlowiseAI/Flowise/pull/6499 issue tracking · patch
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3 release notes