Incomplete List of Disallowed Inputs in Flowise - #VU140054
Published: July 30, 2026
Vulnerability identifier: #VU140054
CSH Severity: Medium
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-184
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information and write arbitrary files to the server filesystem.
The vulnerability exists due to incomplete list of disallowed inputs in pythonCodeValidator.ts when validating Python code generated for the CSVAgent. A remote user can prompt the LLM to generate allowed Pandas DataFrame methods such as to_csv() or to_json() to disclose sensitive information and write arbitrary files to the server filesystem.
The issue affects Pyodide-based execution and requires access to interact with a CSVAgent or upload a CSV.
Affected software
Flowise
Remediation
Install security update from vendor's website.
Flowise - update to 3.1.3