CVE-2026-73484

EUVD-2026-57800
Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
8.6 HIGH
NETWORK
LOW
LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
flowiseaiflowise
𝑥
< 3.1.3
CNA
Common Weakness Enumeration
References
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m
https://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-pandas-methods
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m