CVE-2026-73485 is a critical code injection vulnerability affecting Flowise prior to version 3.1.3. The vulnerability exists in the Airtable Agent node, where attackers can send crafted prompts that bypass the pythonCodeValidator blocklist via obfuscation. This enables execution of arbitrary Python code in an unsandboxed pyodide environment, granting attackers full access to the host OS. The vulnerability requires no user interaction and can be exploited remotely without authentication, though it has a high attack complexity.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary Python code with full access to the host operating system. This can lead to complete system compromise, data theft, or further attacks on the environment where Flowise is deployed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Airtable Agent node and avoid exposing Flowise instances to untrusted networks. Monitor vendor channels for updates and apply patches promptly once released.