{"data":{"id":"89215702-e795-41b5-b522-ae8937becf80","title":"GHSA-52fh-8v99-63c2: Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE","summary":"The validatePythonCodeForDataFrame blacklist in Flowise's packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, letting arbitrary Python run inside Pyodide and full OS command execution on the Flowise host through Pyodide's js module interop. The validator gates pyodide.runPythonAsync calls in the CSV Agent and Airtable Agent, and the source says this reopens the paths patched as GHSA-3hjv-c53m-58jj and GHSA-v38x-c887-992f. The source states the original patches are effectively reintroduced in 3.1.2.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-52fh-8v99-63c2","publishedAt":"2026-08-04T17:31:09.000Z","cveId":"CVE-2026-70470","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise-components@<= 3.1.2 (fixed: 3.1.3)","flowise@<= 3.1.2 (fixed: 3.1.3)"],"affectedPackageNames":["flowise-components","flowise"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise","Pyodide","CSVAgent","AirtableAgent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00972,"epssCheckedAt":"2026-11-05T06:10:15.512Z","kevDateAdded":null,"advisoryAliases":["GHSA-52fh-8v99-63c2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-04T17:31:09.000Z","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"fixCheckedAt":"2026-10-29T21:32:16.926Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:41:14.612Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:16.778Z"},{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-40,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:16.778Z"}]}}