CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.3 are vulnerable to a critical code injection flaw in the Airtable Agent node, enabling unauthenticated attackers to execute arbitrary Python code by circumventing security measures through obfuscation. This vulnerability allows for the execution of malicious code in an unsandboxed environment, granting attackers full access to the host operating system. Organizations utilizing Flowise should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.