Incomplete List of Disallowed Inputs in Flowise - CVE-2026-73484
Published: July 30, 2026 / Updated: September 14, 2026
Vulnerability identifier: #VU140054
CSH Severity: Medium
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-73484
CWE-ID: CWE-184
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information and write arbitrary files to the server filesystem.
The vulnerability exists due to incomplete list of disallowed inputs in pythonCodeValidator.ts when validating Python code generated for the CSVAgent. A remote user can prompt the LLM to generate allowed Pandas DataFrame methods such as to_csv() or to_json() to disclose sensitive information and write arbitrary files to the server filesystem.
The issue affects Pyodide-based execution and requires access to interact with a CSVAgent or upload a CSV.
Affected software
Flowise
How to mitigate CVE-2026-73484
Install security update from vendor's website.
Flowise - update to 3.1.3