CVE-2026-73487 is a critical code injection vulnerability in FlowiseAI's Flowise product affecting versions prior to 3.1.3. The vulnerability arises from a regex-based Python code validator bypass in CSV and Airtable Agent nodes, enabling unauthenticated attackers to inject malicious code via prompt injection. Attackers can leverage unblocked pandas functions such as pd.read_json() to exfiltrate data, perform server-side request forgery (SSRF) against internal services, or achieve code execution through the unauthenticated prediction API. The CVSS 4.0 base score is 9.0, reflecting a critical severity with network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality and security capabilities.

Successful exploitation allows unauthenticated attackers to execute arbitrary Python code within the Flowise environment. This can lead to exfiltration of sensitive datasets, SSRF attacks targeting internal network services, and full code execution via the unauthenticated prediction API. The vulnerability compromises confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Until a patch is available, restrict access to the prediction API and agent nodes, and monitor for suspicious activity related to prompt injection attempts.