CVE-2026-69264
Received Received - Intake

Flowise CSVAgent Remote Code Execution via CSV Data URI

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis, which on Node.js exposes eval and dynamic import, the attacker can break out of the Python string literal, hand a JavaScript string to js.eval, dynamically import Node built-in modules such as fs and child_process, and execute arbitrary file I/O or OS commands as the Flowise process. The two validator paths around this code, validatePythonCodeForDataFrame and validateCustomReadCSVFunction, are never applied to the bootstrap template. A workspace user with chatflows:create or agentflows/chatflows update permission can plant a CSV Agent node with a crafted csvFile; once the chatflow is exposed via POST /api/v1/prediction/:id, any unauthenticated request triggers host remote code execution. This issue is fixed in version 3.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-69264
EUVD
EUVD-2026-52801

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
flowiseai flowise to 3.1.3 (exc)
flowiseai flowise 3.1.3
flowise csvagent to 3.1.3 (inc)
pyodide pyodide *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-69264 is a critical remote code execution (RCE) vulnerability in Flowise's CSVAgent component. It allows an attacker to inject malicious JavaScript into a Python code template executed by Pyodide. The attacker crafts a CSV file data URI with a base64-encoded segment that breaks out of the Python string literal. Through Pyodide's default js bridge to Node.js, the attacker can use eval or dynamic import to execute arbitrary OS commands or file I/O as the Flowise process.

Detection Guidance

To detect this vulnerability, check if Flowise is running version 3.1.3 or later. Inspect chatflows for CSVAgent nodes with user-supplied csvFile data URIs containing base64-encoded segments. Monitor for unexpected file I/O or OS command execution patterns in logs.

Impact Analysis

If you run Flowise versions 3.1.2 or earlier with a CSVAgent node exposed via POST /api/v1/prediction/:id, an attacker can execute arbitrary commands on your server. This includes reading/writing files, installing malware, or taking control of the system. The attack requires only unauthenticated access to the exposed endpoint and user permissions to create or modify chatflows.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA due to unauthorized code execution and potential data exfiltration or tampering. GDPR requires protecting personal data integrity and confidentiality, while HIPAA mandates safeguards against unauthorized access to protected health information. A successful exploit could lead to data breaches, unauthorized modifications, or loss of audit trails, triggering compliance violations and legal penalties.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later immediately. Remove or disable any CSVAgent nodes in chatflows. Restrict permissions for creating or modifying chatflows to trusted users only. Block unauthenticated access to POST /api/v1/prediction/:id endpoints if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69264. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart