59 matches found
NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium
authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
@cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4), @dataform/cli (>=3.0.46, <=3.0.71) +24 more potentially affected by CVE-2026-92956 via vm2 (>=3.10.1, <=3.11.6)
vm2 NPM version =3.10.1, =1.0.0-beta.1, =3.0.46, =0.1.0, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =1.0.0-beta.1, =1.1.0, =0.2.0, =2.32.0, =2.33.7 and more Source cves: CVE-2026-92956 Source advisory: GHSA-WJWH-QQVP-G4P4...
CVE-2026-100609
Flowise npm packages flowise and flowise-components through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace findOneBy id: credentialId with no workspaceId condition in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant GET...
EUVD-2026-87704
Flowise npm packages flowise and flowise-components through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace findOneBy id: credentialId with no workspaceId condition in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant GET...
CVE-2026-100609
The Flowise npm packages (flowise and flowise-components) versions through 3.1.4 are vulnerable to an Insecure Direct Object Reference (IDOR) . The software fails to filter credential lookups by the requesting user's workspaceId when querying by ID. This flaw affects several code paths, including...
CVE-2026-100609 Flowise through 3.1.4 Insecure Direct Object Reference via Credential
Flowise npm packages flowise and flowise-components through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace findOneBy id: credentialId with no workspaceId condition in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant GET...
CVE-2026-100609: Authorization Bypass Through User-Controlled Key
Flowise npm packages flowise and flowise-components through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace findOneBy id: credentialId with no workspaceId condition in several code paths: getAllOpenaiAssistants/getSingleOpenaiAssistant GET...
Arbitrary Code Injection
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the run method in the CSVAgents class. An attacker can execute arbitrary code in the context of the server process by sending crafted prompts to a chatflow using...
copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-70477 via flowise-components (>=1.3.4, <=1.8.6)
flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-70477 Source advisory: MEND:CVE-2026-70477...
Eval Injection
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Eval Injection via the CSVAgent process. An attacker can execute arbitrary code on the host system by injecting malicious input into the csvFile parameter, which is interpolated directly into...
External Control of File Name or Path
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to External Control of File Name or Path via the S3 Directory loader process. An attacker can write arbitrary files to locations outside the intended temporary directory by supplying crafted S3...
NPM: Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
NPM: Flowise: Authenticated arbitrary file write in the S3 Directory document loader via unsanitized S3 object keys vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
NPM: Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
NPM: Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
Incomplete List of Disallowed Inputs
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code...
Incomplete List of Disallowed Inputs
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the validatePythonCodeForDataFrame process. An attacker can execute arbitrary operating system commands by submitting specially crafted Python code...
Incomplete List of Disallowed Inputs
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs through insufficient validation of environment variables in the validateEnvironmentVariables process. An attacker can execute arbitrary code with the...
NPM: Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
NPM: Flowise: CVE-2025-8943 Patch Bypass: npmconfigyes bypasses MCP environment variable blocklist Unauthenticated RCE vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...
Arbitrary Code Injection
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the additionalConfig input, which allows overriding the intended SQLite database path. An attacker can achieve arbitrary code execution by crafting a malicious...