Loading vulnerability…
Authenticated RCE in Flowise TypeORM DataSource Configuration
CVE-2026-69251 is an authenticated remote code execution vulnerability in Flowise versions before 3.1.3, including affected flowise-components packages. Record manager and agent memory nodes pass user-controlled additionalConfig values into TypeORM DataSource configuration without adequately restricting dangerous options. TypeORM options including entities, subscribers, and migrations can cause local JavaScript files to be loaded. An authenticated attacker can upload a JavaScript payload and reference it through a permitted DataSource option, resulting in execution of attacker-controlled code in the Flowise server process.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation provides arbitrary code execution on the Flowise server with the privileges of the Flowise service. This can enable complete compromise of application data and secrets accessible to that process, modification of application state, deployment of persistence mechanisms, and potential lateral movement from the affected host.
If you can’t patch tonight, do this now.
Until upgrades are complete, remove or disable user access to vulnerable record manager and agent memory node configurations. Do not permit untrusted users to supply additionalConfig values. Enforce an allowlist of benign TypeORM DataSource options and block options capable of loading code or altering driver behavior, including entities, subscribers, migrations, and extra. Restrict upload capabilities and access to files that could be resolved by the Flowise process.
Patch, then assume compromise.
Upgrade Flowise and flowise-components to version 3.1.3 or later. The fixed release sanitizes TypeORM DataSource options and rejects dangerous options such as entities.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.