CVE-2026-73485
Received Received - Intake

Flowise Airtable Agent Node Python Code Injection Vulnerability

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: VulnCheck

Description
Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-73485
EUVD
EUVD-2026-57801

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
flowise flowise to 3.1.3 (exc)
flowiseai flowise to 3.1.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-73485 is a critical remote code execution vulnerability in Flowise versions before 3.1.3. It exists in the Airtable Agent node and allows unauthenticated attackers to execute arbitrary Python code by bypassing input validation through obfuscation techniques. Attackers can send crafted prompts to a chatflow to inject malicious Python code, which runs in an unsandboxed Pyodide environment with full host OS access.

Detection Guidance

Check Flowise version with 'npm list -g flowise' or 'flowise --version'. Monitor network traffic for unusual prompts sent to Airtable Agent nodes. Inspect server logs for unexpected Python code execution attempts or unsandboxed pyodide environment activity.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on the server running Flowise with the privileges of the user running the service. This could lead to complete system compromise, data theft, unauthorized access, or disruption of services. Attackers do not need authentication to exploit this issue.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules. Organizations using vulnerable versions may face compliance violations, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies
  • Upgrade Flowise to version 3.1.3 or later immediately to patch the vulnerability.
  • Disable or remove the Airtable Agent node if not required to reduce attack surface.
  • Restrict network access to Flowise instances to trusted IPs only.
  • Monitor for any signs of compromise, such as unauthorized code execution or unusual server activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73485. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart