CVE-2026-69256 Details
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to provide Python code that is executed through pyodide; although a denylist blocked dangerous Python constructs, pandas.read_pickle() could deserialize a pickled payload and achieve code execution without matching the denied words. The affected file is flowise-components/nodes/agents/CSVAgent/CSVAgent.ts, where user-supplied customReadCSVFunc is evaluated as pd.${customReadCSVFunc}. An authenticated user who can create or modify a chatflow can add a CSV Agent, place a malicious read_pickle payload in the Additional Parameters, save the chatflow, and trigger /api/v1/prediction/<UUID> to execute commands. This issue is fixed in version 3.1.3.
A remote code execution vulnerability exists in the Flowise application, specifically within the CSVAgent node, in versions prior to 3.1.3. The issue arises because the CSVAgent node allows users to execute Python code via pyodide, intended for CSV processing with pandas. Although a denylist exists to block dangerous Python constructs, the pandas function 'read_pickle()' can be exploited to deserialize a pickled payload, bypassing the denylist and leading to unauthorized code execution. This vulnerability affects authenticated users who can create or modify chatflows.
Users can update to Flowise version 3.1.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x6vm-w76m-8j7g | CISA-ADP | ExploitVendor Advisory |
| https://github.com/FlowiseAI/Flowise/commit/c79fe56a6c249850e96bce9b4859f7a0083e4507 | [email protected] | Patch |
| https://github.com/FlowiseAI/Flowise/pull/6257 | [email protected] | Issue TrackingPatch |
| https://github.com/FlowiseAI/Flowise/releases/tag/[email protected] | [email protected] | PatchRelease Notes |
| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x6vm-w76m-8j7g | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| flowiseai flowise | < 3.1.3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 14, 2026 | Initial Analysis | [email protected] |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 4, 2026 | New CVE Received | [email protected] |