{"data":{"id":"d6c8e7b4-8965-4a01-82a0-6964e4b27faf","title":"CVE-2026-73487: Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows…","summary":"CVE-2026-73487 affects Flowise before 3.1.3. A regex-based Python code validator in the CSV and Airtable Agent nodes can be bypassed, letting unauthenticated attackers inject malicious code through prompt injection. Attackers can use unblocked pandas functions such as pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution via the unauthenticated prediction API. VulnCheck rates it CVSS-B 9.0 (CRITICAL), while NVD has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73487","publishedAt":"2026-08-13T12:17:24.083Z","cveId":"CVE-2026-73487","cweIds":["CWE-94"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.1.2 (fixed: 3.1.3)","flowise-components@<= 3.1.2 (fixed: 3.1.3)"],"affectedPackageNames":["flowise","flowise-components"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise","CSV Agent node","Airtable Agent node"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise Python code validator bypass in CSV and Airtable Agent nodes","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00961,"epssCheckedAt":"2026-11-12T18:09:37.786Z","kevDateAdded":null,"advisoryAliases":["GHSA-w7x8-q2gp-5cgg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:45:30.395Z","patchAvailable":true,"disclosureDate":"2026-08-13T12:17:24.083Z","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-49,"fixCheckedAt":"2026-10-29T21:32:00.799Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:41:14.612Z","daysToFix":-49,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:00.611Z"},{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.3","matchedVersion":"3.1.3","fixReleasedAt":"2026-06-25T10:35:37.031Z","daysToFix":-49,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:00.611Z"}]}}