Incomplete List of Disallowed Inputs in Flowise - CVE-2026-70470
Published: July 30, 2026
Vulnerability identifier: #VU140065
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-70470
CWE-ID: CWE-184
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code.
The vulnerability exists due to incomplete list of disallowed inputs in the Pyodide code validator in packages/components/src/pythonCodeValidator.ts when processing attacker-controlled Python code for CSV_Agent or Airtable_Agent. A remote attacker can supply Python code using Unicode homoglyph identifiers to bypass the blacklist and execute arbitrary code.
Unauthenticated exploitation is possible through public chatflows, and the issue affects both LLM-generated Python code and the customReadCSV path.
Affected software
Flowise
How to mitigate CVE-2026-70470
Install security update from vendor's website.
Flowise - update to 3.1.3