Flowise: Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that…
Flowise
More for Flowise RSS feed for Flowise
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-73485
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 13, 2026
- Source last modified
- October 24, 2026
Description
Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.
Description quoted from the NVD record.
Who is affected
Flowise, a tool for building apps and chatbots that use AI language models, has a flaw in versions before 3.1.3. It affects chat apps built in Flowise (called chatflows) that use the Airtable Agent building block. An attacker who does not need to log in can send specially written messages to such a chatflow, get around a built-in check meant to block dangerous code, and make it run the attacker's own code. That code runs with full access to the computer hosting Flowise. This flaw is rated High.
What to do
- The person who installed or runs Flowise for your organization should handle this. If an IT provider or vendor runs it for you, send them this advisory and ask when the update will be done.
- Update Flowise to version
3.1.3or later, which fixes this flaw. - Check whether any of your chatflows use the Airtable Agent building block. Those chatflows are the ones this flaw affects, so make sure the update covers every Flowise installation that runs them.
- If you are not sure whether your organization uses Flowise or which version it runs, ask the person or provider who set it up.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.