Vulnerabilidades en FlowiseAI
120 resultadosCVE-2026-69251CRITICALFlowise RCE via TypeORM DataSourceEPSS 2.7%CVE-2026-31829HIGHFlowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network AccessEPSS 2.7%CVE-2026-41264CRITICALFlowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-36420HIGHGHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-fileEPSS 1.8%CVE-2026-41137CRITICALFlowise: Code Injection in CSVAgent leads to Authenticated RCEEPSS 1.5%CVE-2026-69264CRITICALFlowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validationEPSS 1.1%CVE-2026-73601CRITICALFlowise before 3.1.3 Remote Code Execution via Custom MCPEPSS 1.1%CVE-2026-69256CRITICALFlowise: Remote Code Execution Vulnerability in CSVAgentEPSS 1.0%CVE-2026-70470CRITICALFlowise: Pyodide validator Unicode homoglyph bypass leads to RCEEPSS 1.0%CVE-2026-73487CRITICALFlowise before 3.1.3 Prompt Injection RCE via CSV AgentEPSS 1.0%CVE-2026-73602CRITICALFlowise before 3.1.3 Sandbox Escape to RCEEPSS 0.8%CVE-2026-69259CRITICALFlowise RCE via SQLite Record Manager NodeEPSS 0.8%CVE-2026-70477CRITICALFlowise: CSV Agent Prompt Injection Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-91934HIGHFlowise before 3.1.4 Remote Code Execution via SQL Database ChainEPSS 0.7%CVE-2026-91932CRITICALFlowise before 3.1.4 Remote Code Execution via cwd ParameterEPSS 0.7%CVE-2026-69254CRITICALFlowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions OverrideEPSS 0.7%CVE-2026-71962HIGHFlowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/downloadEPSS 0.7%CVE-2026-91931CRITICALFlowise before 3.1.4 Remote Code Execution via Custom MCP npxEPSS 0.7%CVE-2026-69258HIGHFlowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction APIEPSS 0.7%CVE-2026-69253CRITICALFlowise Sandbox Escape to RCEEPSS 0.7%