CVE-2026-73485

critical · 9

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2026-08-13

Published

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
flowiseai	flowise	< 3.1.3

Check a specific version with /api/v1/cve/match.

References

https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-c5hr-rc98-xp3g
https://www.vulncheck.com/advisories/flowise-before-remote-code-execution-via-airtable-agent

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-73485