CVE-2026-69264 is a critical code injection vulnerability (CWE-94) in FlowiseAI Flowise prior to version 3.1.3. The CSVAgent component interpolates attacker-controlled csvFile data URI segments directly into a Python source code template executed by Pyodide. Since Pyodide is loaded with a default JavaScript bridge exposing eval and dynamic import on Node.js, an attacker can break out of the Python string literal context, execute JavaScript code, dynamically import Node.js built-in modules like fs and child_process, and perform arbitrary file I/O or OS command execution as the Flowise process. The vulnerability can be exploited by a workspace user with chatflows:create or agentflows/chatflows update permissions by planting a malicious CSV Agent node. Once the chatflow is exposed via the POST /api/v1/prediction/:id endpoint, any unauthenticated request triggers remote code execution. The issue is resolved in Flowise version 3.1.3.

Successful exploitation allows an attacker with limited workspace permissions to achieve unauthenticated remote code execution on the host running Flowise. This includes the ability to perform arbitrary file operations and execute OS commands with the privileges of the Flowise process, posing a critical security risk.

This vulnerability is fixed in Flowise version 3.1.3. Users should upgrade to version 3.1.3 or later to remediate this issue. No official patch or temporary fix is indicated beyond upgrading. Until upgraded, restrict workspace permissions to trusted users only to reduce risk.