ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Flowise”

9 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 9Exploit / PoC 4Ransomware 4AI safety & security 1Advisory 1Threat actor 1
SeverityAllcritical 13high 2medium 4low 0info 1

ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

ZDI discloses CVE-2026-69256, a CVSS 8.8 code injection in Flowise CSV_Agent customReadCSV allowing authenticated remote attackers to execute arbitrary code.

ZDI advisory ZDI-26-545 describes a code injection vulnerability in Flowise's CSV_Agent customReadCSV functionality, tracked as CVE-2026-69256 with a CVSS score of 8.8. It allows remote attackers to execute arbitrary code on affected Flowise installations. Authentication is required to exploit the vulnerability.

ZDI Published Advisories · Aug 11, 2026VulnerabilityCVE-2026-69256

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

ZDI discloses an unauthenticated code injection remote code execution flaw in Flowise's Airtable_Agent (CVE-2026-69264, CVSS 9.8).

ZDI advisory ZDI-26-546 describes a code injection vulnerability in the Flowise Airtable_Agent that allows remote attackers to execute arbitrary code. No authentication is required to exploit the flaw, which carries a CVSS rating of 9.8 and is assigned CVE-2026-69264. Flowise deployments exposing the vulnerable agent component are at risk of full server takeover.

ZDI Published Advisories · Aug 11, 2026VulnerabilityCVE-2026-69264