EUVD-2026-57822

Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON...

CVE-2026-73617

Budibase before 3.40.0 has a NoSQL injection in the MongoDB datasource integration. User-supplied parameters are enriched with handlebars using noEscaping: true and parsed without operator filtering, allowing injection of MongoDB operators through query parameters. Impact described includes bypas...

EUVD-2026-57818

Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...

CVE-2026-73614 Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...

CVE-2026-73614

Network-AI ClaudeHookBridge prior to 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code uses the full untruncated command. This discrepancy permits attackers to place dangerous content beyond the 500-byte threshold in a Bash command field to byp...

CVE-2026-73601 Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

CVE-2026-73601 Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

EUVD-2026-57805

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

EUVD-2026-57806

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73601

Flowise

CVE-2026-73487 Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.readjson to exfiltrate datasets, perform SSRF...

EUVD-2026-57802

Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to...

EUVD-2026-57803

Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection. Attackers can exploit unblocked pandas functions like pd.readjson to exfiltrate datasets, perform SSRF...

CVE-2026-73486 Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to...

CVE-2026-73487

Flowise prior to version 3.1.3 is affected by a vulnerability in the CSV and Airtable Agent nodes where a regex-based Python code validator bypass enables unauthenticated prompt injection. This can allow an attacker to inject and execute code, exfiltrate datasets via unblocked pandas functions (e...

EUVD-2026-57801

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the...

CVE-2026-73485 Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the...

CVE-2026-73485 Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the...