RCE in Flowiseai Flowise

CVE-2026-69256

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to provide Python code that is executed through pyodide; although a denylist blocked dangerous Python…

Vulnerability class: RCE (Remote Code Execution)

Affected products

Weakness classification (CWE)

References