CVE-2026-73484

EUVD-2026-57800
Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35.3%
Affected Products (NVD)
VendorProductVersion
flowiseaiflowise
𝑥
< 3.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m
https://www.vulncheck.com/advisories/flowise-before-sandbox-escape-via-pandas-methods
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x58f-9m57-qc4m