https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:12:13.511971+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292833 EUVD-2026-292833 2026-10-04T06:12:13.515575+00:00 EUVD-2026-292833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41265 fkie_cve-2026-41265 2026-10-04T06:12:13.515610+00:00

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the Airtable_Agents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. Using prompt injection techniques, an unauthenticated attacker with the ability to send prompts to a chatflow using the Airtable Agent node may convince an LLM to respond with a malicious python script that executes attacker controlled commands on the flowise server. This vulnerability is fixed in 3.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-v38x-c887-992f GHSA-v38x-c887-992f — Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability 2026-10-04T06:12:13.515645+00:00

Affected: npm: flowise, npm: flowise-components

ZDI-CAN-29412: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise - Flowise

-- VULNERABILITY DETAILS ------------------------ * Version tested: 3.0.13 * Installer file: hxxps://github.com/FlowiseAI/Flowise * Platform tested: Ubuntu 25.10

---

### Analysis

# FlowiseAI Flowise Airtable Agent pythonCode Prompt Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FlowiseAI Flowise. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the run method of the Airtable_Agents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. An attacker can leverage this vulnerability to execute code in the context of the user running the server.

### Product information

FlowiseAI Flowise version 3.0.13 (https://github.com/FlowiseAI/Flowise)

### Setup Instructions

npm install -g flowise@3.0.13 npx flowise start

### Root Cause Analysis

FlowiseAI Flowise is an open source low-code tool for developers to build customized large language model (LLM) applications and AI agents. It supports integration with various LLMs, data sources, and tools in order to facilitate rapid development and deployment of AI solutions. Flowise offers a web interface with a drag-and-drop…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1145 WID-SEC-W-2026-1145 — Flowise: Mehrere Schwachstellen 2026-10-04T06:12:13.515751+00:00

Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.