CVE-2026-73486

creationtimestamp| type| source ---|---|--- 2026-08-13 13:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrfptsts2j 2026-08-17 16:45:09+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-73486

CVE-2026-73486 (Flowise) : Flowise versions before 3.1.3 contain a code injection vulnerability in the CSV Agent node’s customReadCSV parameter. An authenticated attacker can trigger arbitrary Python code execution by bypassing a static regex blocklist used for validation, enabling code execution...