Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-41137

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, The CSVAgent allows providing a custom Pandas CSV read code. Due to lack of sanitization, an attacker can provide a command injection payload that will get interpolated and executed by the server. This vulnerability is fixed in 3.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FlowiseAI Flowise

  • < 3.1.0affected

FlowiseAI flowise-components

  • < 3.1.0affected

References