Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Description

Flowise’s CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis (which on Node.

Recommendation

Update the flowise-components package to the latest compatible version. Followings are version details:

• Affected version(s): <= 3.1.2
• Patched version(s): 3.1.3

References

• GHSA-4j8x-x6v7-w9rq
• CVE-2026-69264
• CWE-94
• CWE-95
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Flowise: Authenticated RCE Via MCP Adapters - CVE-2026-40933
• Flowise: Code Injection in CSVAgent leads to Authenticated RCE - CVE-2026-41137
• Flowise RCE via SQLite Record Manager Node - CVE-2026-69259
• Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override - CVE-2026-69254

You might also like:

Update Cheat Sheet for Developers

CSRF, XXE, and 12 Other Security Acronyms Explained

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

flowise-components