Threats tagged 'ghsa-xcrh-wphv-74q4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	EPSS 0.7%	CVE-2026-73486FlowiseAI Flowise · Code Injection Critical9.0EPSS 0.7%2026-08-13CVE Database V5CVE-2026-73486 Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code. The validator uses a static regex blocklist that can be bypassed through obfuscation techniques, enabling attackers to execute code in the unsandboxed pyodide environment with full system access. EPSS 0.7%Vulnerability #ghsa-xcrh-wphv-74q4	CVE Database V5	2026-08-13

Page 1 of 1