Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

September 9th, 2026
ZDI-26-634 ZDI-CAN-30459

CVE ID

CVE-2026-70477

CVSS Score

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors

Flowise

Affected Products

Flowise

Vulnerability Details

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the run method of the CSV_Agents class. The issue results from insufficient input sanitization when using untrusted data to construct an LLM prompt. An attacker can leverage this vulnerability to execute code in the context of the service account.

Additional Details

Flowise has issued an update to correct this vulnerability. More details can be found at:
https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c

Disclosure Timeline

  • 2026-04-23 - Vulnerability reported to vendor
  • 2026-09-09 - Coordinated public release of advisory
  • 2026-09-09 - Advisory Updated

Credit

Dre Cura (@dre_cura) of TrendAI Research

Back to Advisories