GHSA-g32j-mmxr-gfq5: Flowise RCE via TypeORM DataSource
Summary
Flowise AI version 3.1.2 has a critical vulnerability where several database connection nodes (MySQL, PostgreSQL, SQLite, and Agent Memory components) allow users to set arbitrary options through an `additionalConfig` input that gets passed to TypeORM's DataSource class. Since TypeORM's DataSource options support loading local files as JavaScript code, an attacker can exploit this to achieve RCE (remote code execution, where an attacker can run commands on a system they don't own) by crafting malicious configuration options.
Vulnerability Details
EPSS: 0.0%
Yes
August 4, 2026
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://github.com/advisories/GHSA-g32j-mmxr-gfq5
First tracked: August 4, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 92%