CVE-2026-73487 FlowiseAI CVE debrief

Who should care

Organizations using Flowise before version 3.1.3, security teams responsible for monitoring and patching vulnerabilities, and administrators of systems that integrate with Flowise should be aware of this critical vulnerability and take immediate action to patch or mitigate the risk.

Technical summary

The Flowise application before version 3.1.3 contains a regex-based Python code validator bypass vulnerability in its CSV and Airtable Agent nodes. This vulnerability allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API. The vulnerability has been assigned a CVSS score of 9, indicating a critical severity level.

Defensive priority

Organizations using Flowise before version 3.1.3 should prioritize patching to prevent potential code injection attacks.

Recommended defensive actions

• Patch Flowise to version 3.1.3 or later
• Restrict access to the prediction API
• Monitor for suspicious activity
• Inventory and audit Flowise deployments
• Implement compensating controls for unpatched systems

Evidence notes

The CVE-2026-73487 record indicates a critical vulnerability in Flowise before version 3.1.3, allowing unauthenticated attackers to inject malicious code via prompt injection in CSV and Airtable Agent nodes. The vulnerability has a CVSS score of 9 and is classified as CRITICAL. Limited details are available about the specific exploits and affected systems.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.