Description
============================================================================= Security Advisory elttam
Topic: Flowise RCE via TypeORM DataSource
Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 C
Recommendation
Update the flowise-components package to the latest compatible version. Followings are version details:
- Affected version(s): <= 3.1.2
- Patched version(s): 3.1.3
References
Related Issues
- Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override - CVE-2026-69254
- Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation - CVE-2026-69264
- Flowise RCE via SQLite Record Manager Node - CVE-2026-69259
- Flowise: Authenticated RCE Via MCP Adapters - CVE-2026-40933
You might also like:
- Tags:
- npm
- flowise-components
Anything's wrong? Let us know Last updated on August 04, 2026