Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

Description

The validatePythonCodeForDataFrame blacklist in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide and full OS command execution on the Flowise host via Pyodide’s js module interop.

Recommendation

Update the flowise-components package to the latest compatible version. Followings are version details:

• Affected version(s): <= 3.1.2
• Patched version(s): 3.1.3

References

• GHSA-52fh-8v99-63c2
• CVE-2026-70470
• CWE-184
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) - CVE-2026-69263
• Flowise: Code Injection in CSVAgent leads to Authenticated RCE - CVE-2026-41137
• Flowise: Parameter Override Bypass Remote Command Execution - CVE-2026-41268
• Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) - CVE-2026-43995

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

CSRF, XXE, and 12 Other Security Acronyms Explained

Update Cheat Sheet for Developers

Tags:

npm

flowise-components