{"data":{"id":"68e23887-4c48-4a58-acfb-59322d06e9c2","title":"GHSA-3hjv-c53m-58jj: Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","summary":"Trend Micro's Zero Day Initiative reports an unauthenticated remote code execution flaw in FlowiseAI Flowise, tested at version 3.0.13. The flaw sits in the run method of the CSV_Agents class, which evaluates an LLM-generated Python script without proper sandboxing. The input validation that checks for forbidden patterns can be bypassed, allowing arbitrary OS commands to run on the server as the user running it.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3hjv-c53m-58jj","publishedAt":"2026-04-21T20:19:52.000Z","cveId":"CVE-2026-41264","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","jailbreak"],"issueType":"vulnerability","affectedPackages":["flowise-components@<= 3.0.13 (fixed: 3.1.0)","flowise@<= 3.0.13 (fixed: 3.1.0)"],"affectedPackageNames":["flowise-components","flowise"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise","FlowiseAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01789,"epssCheckedAt":"2026-11-09T18:09:51.567Z","kevDateAdded":null,"advisoryAliases":["GHSA-3hjv-c53m-58jj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-21T20:19:52.000Z","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-36,"fixCheckedAt":"2026-10-29T21:37:45.730Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051","AML.T0054"],"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:47:16.783Z","daysToFix":-36,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:45.581Z"},{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-36,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:45.581Z"}]}}