CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.3 are vulnerable to a critical code injection flaw in the CSV Agent node's customReadCSV parameter, allowing authenticated attackers to execute arbitrary Python code. The vulnerability arises from a bypassable static regex blocklist, enabling code execution in an unsandboxed environment with full system access. Organizations using affected versions should prioritize immediate updates to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to execute code in the unsandboxed pyodide environment with full system access.