CVE-2026-46442 | FlowiseAI Flowise up to 3.1.1 node-custom-function code injection

SecurityVulns
Yanac

A vulnerability was found in FlowiseAI Flowise up to 3.1.1. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/node-custom-function. The manipulation leads to code injection.

This vulnerability is referenced as CVE-2026-46442. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More