Flowise CSVAgent Flaw Enabled Root-Level Remote Code Execution

Flowise disclosed and fixed CVE-2026-69255, a high-severity remote code execution flaw in the CSVAgent component affecting versions earlier than 3.1.3. The bug stemmed from attacker-controlled CSV content being inserted directly into executable Python before being passed to Pyodide, allowing code injection. Because Flowise validated only later LLM-generated code and not the initial Python block, an attacker could escape the intended string context, pivot through Pyodide's JavaScript bridge, reach Node.js child_process, and execute arbitrary operating system commands as root inside the Flowise container.

A related Flowise GitHub commit shows the vendor removed both CSVAgent and AirtableAgent and deleted Python code validation functionality as part of the security response. The change also removed the pyodide dependency and deleted more than 1,600 lines of code, indicating a broad rollback of the affected feature set rather than a narrow patch. The vulnerability is tracked as CWE-94 and is addressed in Flowise 3.1.3.