CVE-2026-70477 | FlowiseAI Flowise up to 3.1.2 CSV Agent CSV_Agents.run injection

A vulnerability, which was classified as critical, was found in FlowiseAI Flowise up to 3.1.2. Impacted is the function CSV_Agents.run of the component CSV Agent. Such manipulation leads to injection.

This vulnerability is referenced as CVE-2026-70477. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More