Flowise Code Injection via CSV Agent Node Parameter

Executive Summary

CVE-2026-73486 is a critical code injection vulnerability in Flowise before version 3.1.3. It affects the CSV Agent node's customReadCSV parameter, allowing authenticated attackers to execute arbitrary Python code. The vulnerability stems from insufficient input validation that bypasses a static regex blocklist through obfuscation techniques. Exploited payloads run in an unsandboxed Pyodide environment, granting full system access to the attacker.

Useful 0 Not Useful 0

Detection Guidance

Check Flowise version with npm list -g flowise or npm list flowise. Inspect chatflows using CSV Agent nodes for suspicious customReadCSV parameters containing Python code or obfuscated payloads. Monitor server logs for unexpected Python execution or system access attempts.

Useful 0 Not Useful 0

Impact Analysis

If you run a vulnerable Flowise instance, an authenticated attacker could exploit this to execute arbitrary Python code on your server. This could lead to complete system compromise, data theft, unauthorized access, or disruption of services. The attack requires authentication but can be performed remotely if the system is exposed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to severe compliance violations under GDPR and HIPAA due to unauthorized data access or exfiltration. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. A successful exploit could result in data breaches, triggering mandatory breach notifications and potential fines.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Flowise to version 3.1.3 or later immediately. Remove or disable any CSV Agent nodes in existing chatflows. Implement strict input validation for all parameters. Restrict server access to trusted users only. Monitor for signs of exploitation in logs.

Useful 0 Not Useful 0