CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.3 are vulnerable due to a regex-based bypass in their Python code validator, specifically within CSV and Airtable Agent nodes. This flaw allows unauthenticated attackers to inject malicious code, potentially leading to data exfiltration, server-side request forgery (SSRF) against internal services, or arbitrary code execution through the prediction API. Organizations using Flowise should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.read_json() to exfiltrate datasets, perform SSRF against internal services, or achieve code execution through the unauthenticated prediction API.