{"data":{"id":"fa4bef48-e49c-43f4-888c-2527a9bff35a","title":"CVE-2026-41138: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, there is a…","summary":"CVE-2026-41138 affects Flowise, a drag and drop interface for building customized large language model flows, prior to 3.1.0. The flaw lies in AirtableAgent.ts, where user input is applied directly to the question parameter in the prompt template and passed to Python code using Pandas without sanitization, allowing remote code execution. The weakness is classified as CWE-94, Improper Control of Generation of Code.","solution":"This vulnerability is fixed in 3.1.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41138","publishedAt":"2026-04-23T20:16:14.380Z","cveId":"CVE-2026-41138","cweIds":["CWE-94"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise@<= 3.0.13 (fixed: 3.1.0)","flowise-components@<= 3.0.13 (fixed: 3.1.0)"],"affectedPackageNames":["flowise","flowise-components"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flowise remote code execution through AirtableAgent Pandas prompt input","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00603,"epssCheckedAt":"2026-11-09T12:10:45.895Z","kevDateAdded":null,"advisoryAliases":["GHSA-f228-chmx-v6j6"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:18.426Z","patchAvailable":true,"disclosureDate":"2026-04-23T20:16:14.380Z","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-38,"fixCheckedAt":"2026-10-29T21:37:37.535Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"flowise-components","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:45:59.849Z","daysToFix":-38,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:37.379Z"},{"ecosystem":"npm","name":"flowise","fixedVersion":"3.1.0","matchedVersion":"3.1.0","fixReleasedAt":"2026-03-16T14:47:16.783Z","daysToFix":-38,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:37.379Z"}]}}