2 matches found
CVE-2026-70470 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...
9.5CVSS0.00523EPSS
SaveExploits0References4
CVE-2026-70470
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...
9.5CVSS5.9AI score0.00523EPSS
SaveExploits0References5Affected Software1
20