Flowise: Remote Code Execution Vulnerability in CSVAgent
Affects: Flowise
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
331 advisories rated High
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection, Root Shell Verified
Affects: Flowise
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Affects: Flowise
Flowise: Flowise Sandbox Escape to RCE
Affects: Flowise
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files…
Affects: Flowise
Flowise: Flowise RCE via TypeORM DataSource
Affects: Flowise
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Affects: Flowise
Hugging Face Transformers: Transformers save_pretrained path traversal allows arbitrary file writes through chat template…
Affects: Hugging Face Transformers
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS…
Affects: Langflow
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel…
Affects: Open WebUI
Jupyter: JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
Affects: Jupyter
Jupyter: JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
Affects: Jupyter
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
Affects: n8n
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Affects: n8n
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
Affects: n8n
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
Affects: n8n
n8n: Expression sandbox escape via arrow-function bodies enabling command execution
Affects: n8n
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion
Affects: n8n
n8n: Authenticated code execution in the n8n Git node
Affects: n8n
n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction
Affects: n8n
n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes
Affects: n8n
n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login
Affects: n8n
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Affects: n8n
n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction
Affects: n8n
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token…
Affects: n8n
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
Affects: n8n
n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner
Affects: n8n
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
Affects: n8n
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
Affects: Keras
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute…
Affects: Langflow
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause…
Affects: NVIDIA Triton Inference Server
Ollama: Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
Affects: Ollama
Open WebUI: open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
Affects: Open WebUI
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id…
Affects: Open WebUI
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
Affects: Open WebUI
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project…
Affects: n8n
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
Affects: LiteLLM
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
Affects: LiteLLM
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression…
Affects: n8n
n8n: N8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST…
Affects: n8n
Open WebUI: Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to Stored XSS via iFrame in citations model
Affects: Open WebUI