CVE-2026-73485

creationtimestamp| type| source ---|---|--- 2026-08-13 13:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxqtukbgk23 2026-08-17 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73485 Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the...