CVE-2026-73484
Received Received - Intake

Sandbox Escape in Flowise via Pandas Method Abuse

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: VulnCheck

Description
Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-73484
EUVD
EUVD-2026-57800

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
flowise flowise to 3.1.3 (exc)
flowiseai flowise to 3.1.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-184 The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-73484 is a sandbox escape vulnerability in Flowise versions before 3.1.3. The issue occurs in the pythonCodeValidator.ts file where the sandbox fails to block certain Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate data from uploaded CSV files or write arbitrary files to the server's filesystem.

Detection Guidance

Check Flowise version with npm list -g flowise or flowise --version. Inspect pythonCodeValidator.ts for unblocked Pandas methods like to_csv, to_json, pipe, or query. Monitor filesystem writes in /tmp or Flowise directories and CSV data exfiltration attempts.

Impact Analysis

This vulnerability allows authenticated attackers to steal sensitive data from uploaded CSV files or write malicious files to the server. Since the attack requires low privileges and no user interaction, any authenticated user interacting with a CSVAgent or uploading a CSV file could exploit it.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for data confidentiality and integrity. Exfiltration of sensitive data or unauthorized file writes may result in non-compliance, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later immediately. Temporarily restrict authenticated user access to CSVAgent functions. Review filesystem permissions for Flowise directories. Monitor for suspicious file writes or data exfiltration attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart