ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
ZDI disclosed a CVSS 9.8 unauthenticated prompt injection vulnerability in Flowise's CSV agent that allows remote arbitrary code execution.
ZDI published advisory ZDI-26-634 for a prompt injection vulnerability in Flowise's CSV agent component. Remote, unauthenticated attackers can inject prompts to execute arbitrary code on affected installations. ZDI assigned CVSS 9.8 and the issue is tracked as CVE-2026-70477.
- Prompt injection leads to remote code execution in Flowise
- No authentication required for exploitation
- ZDI rated the issue CVSS 9.8
- Tracked as CVE-2026-70477
- CVEs
- CVE-2026-70477
- Vendors
- FlowiseZero Day Initiative
- Products
- Flowise
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-70477 | Flowise: A prompt injection sent to a chatflow using a CSV Agent node can cause the LLM to respond with a malicious Python script that… | 9.5 | <1% |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.