Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 - Flowise AI Unauthenticated Password Reset Overview CVE ID: CVE-2025-58434 Affected Software: Flowise AI Vulnerable Versions: = 3.0.5 Fixed Version: 3.0.6 and later Severity: Critical Author: arensballiu Date: 2025 Description Flowise AI versions up to and including 3.0.5 contain ...

Flowise-RCE

Flowise-RCE CVE-2025-58434 & CVE-2025-59528...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +19 more potentially affected by CVE-2026-106119 via @langchain/mongodb (>=1.0.1, <=1.1.0)

@langchain/mongodb NPM version =1.0.1, =0.1.13, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =0.1.4, =23.1.4, =3.1.0, =2.32.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-106119 Source advisory: GHSA-M6RX-H84Q-8R95...

GHSA-W7X8-Q2GP-5CGG Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...

EUVD-2026-57803

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass...

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

GHSA-9GVV-QJJ3-2P6G Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

EUVD-2026-57799

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

@bat-ai/core (>=0.1.0, <=0.1.4), @biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14) +30 more potentially affected by CVE-2026-106119 via @langchain/mongodb (>=0.0.1, <=1.1.0)

@langchain/mongodb NPM version =0.0.1, =0.1.0, =0.1.13, =0.1.0, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =1.0.5, =0.1.4, =1.0.0, =1.0.27 and more Source cves: CVE-2026-106119 Source advisory: MEND:CVE-2026-106119...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +19 more potentially affected by CVE-2026-105799 via @langchain/redis (>=1.0.1, <=1.1.0)

@langchain/redis NPM version =1.0.1, =0.1.13, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =0.1.4, =23.1.4, =3.1.0, =2.32.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-105799 Source advisory: OSV:GHSA-5X6V-P487-7QH2...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +19 more potentially affected by CVE-2026-105799 via @langchain/redis (>=1.0.1, <=1.1.0)

@langchain/redis NPM version =1.0.1, =0.1.13, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =0.1.4, =23.1.4, =3.1.0, =2.32.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-105799 Source advisory: GHSA-5X6V-P487-7QH2...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92953 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92953 Source advisory: OSV:GHSA-3VGF-8M4Q-Q4QR...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92936 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92936 Source advisory: OSV:GHSA-X6M4-CHR9-CG97...

@cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4), @dataform/cli (>=3.0.46, <=3.0.71) +21 more potentially affected by CVE-2026-92956 via vm2 (>=3.10.1, <=3.11.6)

vm2 NPM version =3.10.1, =1.0.0-beta.1, =3.0.46, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =1.0.0-beta.1, =2.32.0, =2.32.0, =1.68.2, =1.68.2, =1.74.9 and more Source cves: CVE-2026-92956 Source advisory: GHSA-WJWH-QQVP-G4P4...

@cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4), @dataform/cli (>=3.0.46, <=3.0.71) +21 more potentially affected by CVE-2026-92944 via vm2 (>=3.10.2, <=3.11.6)

vm2 NPM version =3.10.2, =1.0.0-beta.1, =3.0.46, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =1.0.0-beta.1, =2.32.0, =2.32.0, =1.68.9, =1.68.9, =1.74.9 and more Source cves: CVE-2026-92944 Source advisory: GHSA-27G9-P43V-CW3V...