Vulnerability · Published Aug 13, 2026 · Assigned by VulnCheck

CVE-2026-73485Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Critical 9.0

In plain English

A critical-severity code injection in Flowise from FlowiseAI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 4.0)9.0Critical

Exploit odds (30 days)0.6%top 51.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques. Attackers can send crafted prompts to a chatflow using the Airtable Agent node to inject malicious Python code that executes in an unsandboxed pyodide environment with full access to the host operating system.

Affected products (as reported)

Vendor	Product	Versions
FlowiseAI	Flowise	0 – before 3.1.3
FlowiseAI	Flowise	0 – before 3.1.3

Weakness: CWE-94 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

GitHub Security Advisory (GHSA-c5hr-rc98-xp3g) vendor-advisory
VulnCheck Advisory: Flowise before 3.1.3 Remote Code Execution via Airtable Agent third-party-advisory