FlowiseAI's Flowise product versions before 3.1.0 contain a code injection vulnerability (CWE-94) in the CSVAgent component. This component permits users to supply custom Pandas CSV reading code, which is not properly sanitized. As a result, an attacker can craft a malicious payload that gets interpolated and executed by the server, leading to arbitrary code execution. The vulnerability is addressed in version 3.1.0 of Flowise. The CVSS 4.0 base score is 9.4, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impacts on confidentiality, integrity, availability, and security requirements.

Successful exploitation allows an attacker to execute arbitrary code on the server running Flowise, potentially compromising confidentiality, integrity, and availability of the system. Given the lack of required privileges and user interaction, the vulnerability poses a critical risk to affected deployments. No known exploits are currently reported in the wild.

Upgrade Flowise to version 3.1.0 or later, where this vulnerability is fixed. Since the vulnerability is resolved in this official release, no additional mitigation steps are required beyond applying the update. Patch status is not explicitly stated in vendor advisories but is confirmed fixed in version 3.1.0 per the vulnerability description.