PT-2026-34236 · Flowise · Flowise

Published 2026-04-21 · Updated 2026-04-27 · CVE-2026-41264

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.0

Description A flaw exists in the run method of the CSV Agents class due to improper sandboxing when evaluating Python scripts generated by a Large Language Model (LLM). An unauthenticated attacker can use prompt injection techniques to convince the LLM to generate a malicious Python script. Because the input validation in the validatePythonCodeForDataFrame() function can be bypassed, this allows the execution of arbitrary commands on the server in the context of the user running the service.

Recommendations Update to version 3.1.0. As a temporary workaround, restrict access to the CSV Agent node to minimize the risk of exploitation.

Exploit

Fix

RCE

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2026-41264

GHSA-3HJV-C53M-58JJ

Affected Products

Flowise

References · 8

• 🔥 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3hjv-c53m-58jj · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41264 · Security Note
• https://osv.dev/vulnerability/GHSA-3hjv-c53m-58jj · Vendor Advisory
• https://github.com/FlowiseAI/Flowise · Note
• https://twitter.com/BuildWthAI/status/2048487137817890946 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1ssnpas/resumen_diario_de_vulnerabilidades_22042026 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1ssjoms/resumen_diario_de_vulnerabilidades_22042026 · Reddit Post
• https://twitter.com/BuildWthAI/status/2048608205513916842 · Twitter Post