---
title: "FlowiseAI flowise-components vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/flowiseai/flowise-components
type: product
description: "FlowiseAI flowise-components has 27 published CVEs, 0 in CISA KEV and 27 with public exploits."
updated: 2026-08-13
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# FlowiseAI flowise-components vulnerabilities

Vendor: [FlowiseAI](https://radicalnotion.ai/vendor/flowiseai)

- **Published CVEs:** 27
- **In CISA KEV:** 0
- **With a public exploit:** 27
- **With a patch:** 27
- **Average CVSS:** 8.8
- **First CVE:** 2025-04-09
- **Latest CVE:** 2026-08-13
- **Ecosystems:** npm

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 18 |
| High | 7 |
| Medium | 2 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 10 |
| [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 6 |
| [CWE-184](https://radicalnotion.ai/cwe/cwe-184) | Incomplete List of Disallowed Inputs | 3 |
| [CWE-78](https://radicalnotion.ai/cwe/cwe-78) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 2 |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 1 |
| [CWE-943](https://radicalnotion.ai/cwe/cwe-943) | Improper Neutralization of Special Elements in Data Query Logic | 1 |
| [CWE-95](https://radicalnotion.ai/cwe/cwe-95) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | 1 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2025 | 2 |
| 2026 | 25 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \< 3.1.0 | range | 12 |
| \< 3.1.3 | range | 12 |
| \< 2.2.4 | range | 1 |
| \< 3.0.13 | range | 1 |
| \< 3.0.8 | range | 1 |
| 3.1.0 | patched | 12 |
| 3.1.3 | patched | 12 |
| 2.2.4 | patched | 1 |
| 3.0.13 | patched | 1 |
| 3.0.8 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-73487 | Flowise before 3.1.3 Prompt Injection RCE via CSV Agent | critical | 9.0 | No | Yes | Yes |
| CVE-2026-73483 | Flowise before 3.1.3 Sandbox Escape via Puppeteer | critical | 9.4 | No | Yes | Yes |
| CVE-2026-70477 | Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | critical | 9.5 | No | Yes | Yes |
| CVE-2026-70470 | Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE | critical | 9.5 | No | Yes | Yes |
| CVE-2026-69264 | Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | critical | 9.4 | No | Yes | Yes |
| CVE-2026-69263 | Flowise: CVE-2025-8943 Patch Bypass: npm\_config\_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | high | 8.7 | No | Yes | Yes |
| CVE-2026-69259 | Flowise RCE via SQLite Record Manager Node | critical | 9.4 | No | Yes | Yes |
| CVE-2026-69256 | Flowise: Remote Code Execution Vulnerability in CSVAgent | critical | 9.4 | No | Yes | Yes |
| CVE-2026-69255 | Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified | critical | 9.2 | No | Yes | Yes |
| CVE-2026-69254 | Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override | critical | 9.4 | No | Yes | Yes |
| CVE-2026-69253 | Flowise Sandbox Escape to RCE | critical | 9.0 | No | Yes | Yes |
| CVE-2026-69251 | Flowise RCE via TypeORM DataSource | critical | 9.0 | No | Yes | Yes |
| CVE-2026-56275 | Flowise - Server-Side Request Forgery via Execute Flow Base URL | medium | 6.0 | No | Yes | Yes |
| CVE-2026-43995 | Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) | medium | 5.3 | No | Yes | Yes |
| CVE-2026-41274 | Flowise: Cypher Injection in GraphCypherQAChain | critical | 9.3 | No | Yes | Yes |
| CVE-2026-41264 | Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | critical | 9.2 | No | Yes | Yes |
| CVE-2026-41265 | Flowise: Airtable\_Agent Code Injection Remote Code Execution Vulnerability | critical | 9.2 | No | Yes | Yes |
| CVE-2026-41271 | Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains | high | 8.3 | No | Yes | Yes |
| CVE-2026-41272 | Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) | high | 7.1 | No | Yes | Yes |
| CVE-2026-41270 | Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox | high | 7.4 | No | Yes | Yes |
| CVE-2026-41268 | Flowise: Flowise Parameter Override Bypass Remote Command Execution | critical | 9.8 | No | Yes | Yes |
| CVE-2026-41137 | Flowise: Code Injection in CSVAgent leads to Authenticated RCE | critical | 9.4 | No | Yes | Yes |
| CVE-2026-41138 | Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. | high | 8.8 | No | Yes | Yes |
| CVE-2026-40933 | Flowise: Authenticated RCE Via MCP Adapters | critical | 10.0 | No | Yes | Yes |
| CVE-2026-31829 | Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access | high | 8.8 | No | Yes | Yes |
| CVE-2025-61913 | Flowise is vulnerable to arbitrary file read, arbitrary file write | critical | 10.0 | No | Yes | Yes |
| CVE-2025-29189 | Flowise Vulnerable to SQL Injection via \`tableName\` Parameter | high | 7.6 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does FlowiseAI flowise-components have?

FlowiseAI flowise-components has 27 published CVE records since 2025.

### How many FlowiseAI flowise-components CVEs are in CISA KEV?

None of FlowiseAI flowise-components's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for FlowiseAI flowise-components vulnerabilities?

Yes — 27 of FlowiseAI flowise-components's CVEs have a known public exploit.

### Which versions of FlowiseAI flowise-components are affected?

10 distinct FlowiseAI flowise-components versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in FlowiseAI flowise-components CVEs?

FlowiseAI flowise-components's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-184 (Incomplete List of Disallowed Inputs), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

### How many critical FlowiseAI flowise-components vulnerabilities are there?

FlowiseAI flowise-components has 18 critical and 7 high-severity CVEs.

### What is the average severity of FlowiseAI flowise-components CVEs?

The average CVSS base score across FlowiseAI flowise-components's scored CVEs is 8.8.

## Other products from this vendor

- [Flowise](https://radicalnotion.ai/vendor/flowiseai/flowise) (152 CVEs)
- [embed](https://radicalnotion.ai/vendor/flowiseai/embed) (1 CVEs)
- [FlowiseChatEmbed](https://radicalnotion.ai/vendor/flowiseai/flowisechatembed) (1 CVEs)
- [Flowise Cloud](https://radicalnotion.ai/vendor/flowiseai/flowise-cloud) (1 CVEs)
- [flowise-embed](https://radicalnotion.ai/vendor/flowiseai/flowise-embed) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/flowiseai/flowise-components). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.