Flowise, a drag & drop interface for building customized large language model flows, has a code injection vulnerability in versions before 3.1.3. The issue arises because the record manager and agent memory nodes allow users to set arbitrary TypeORM DataSource options through the additionalConfig input. Specifically, options such as entities, subscribers, and migrations can load local JavaScript files. An authenticated user can upload a malicious JavaScript payload and reference it from additionalConfig.entities, resulting in arbitrary code execution on the server. This vulnerability is tracked as CVE-2026-69251 and is fixed in Flowise version 3.1.3.

An authenticated attacker can execute arbitrary code on the server hosting Flowise by exploiting this vulnerability. This can lead to full compromise of the server environment, data theft, or further attacks within the network. The CVSS 4.0 score of 9 indicates a critical severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.

Upgrade Flowise to version 3.1.3 or later, where this vulnerability is fixed. No other mitigations are specified. Patch status is confirmed by the vendor advisory stating the fix is in 3.1.3.