CVE-2026-73485: Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated atta

Flowise before version 3.1.3 has a code injection vulnerability (a weakness that lets attackers insert malicious code) in its Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing security checks through obfuscation techniques. Attackers can send specially crafted prompts to inject malicious Python code that runs with full access to the host operating system in an unsandboxed pyodide environment (a Python runtime without security restrictions).