{"schema_version":1,"title":"flowise-components (npm) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 35 vulnerabilities in flowise-components (npm): 0 in the last 7 days and 15 in the last 90 days, 14 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91931, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/flowise-components","json_url":"https://junglewise.ai/threats/technologies/flowise-components.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/flowise-components","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":15,"all_time":35,"critical":14,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":15,"last_365_days":34},"latest":[{"cve":"CVE-2026-91931","cvss":8.5,"epss":0.0068,"slug":"cve-2026-91931-flowise-custom-mcp-remote-code-execution-via-npx","title":"Flowise Custom MCP remote code execution via npx","severity":"high","exploited":false,"published_at":"2026-09-15T16:17:43.883+00:00","url":"https://junglewise.ai/threats/cve-2026-91931-flowise-custom-mcp-remote-code-execution-via-npx"},{"cve":"CVE-2026-73483","cvss":8.8,"epss":0.0074,"slug":"cve-2026-73483-flowise-sandbox-escape-via-puppeteer-in-nodevm","title":"Flowise sandbox escape via puppeteer in NodeVM","severity":"high","exploited":false,"published_at":"2026-08-13T12:17:23.54+00:00","url":"https://junglewise.ai/threats/cve-2026-73483-flowise-sandbox-escape-via-puppeteer-in-nodevm"},{"cve":"CVE-2026-70477","cvss":9.8,"epss":0.0081,"slug":"cve-2026-70477-flowise-rce-via-csv-agent-prompt-injection","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatfl","severity":"critical","exploited":false,"published_at":"2026-08-04T20:16:54.473+00:00","url":"https://junglewise.ai/threats/cve-2026-70477-flowise-rce-via-csv-agent-prompt-injection"},{"cve":"CVE-2026-70470","cvss":9.8,"epss":0.0097,"slug":"cve-2026-70470-flowise-pyodide-validator-unicode-homoglyph-bypass-in-csv-and","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFr","severity":"critical","exploited":false,"published_at":"2026-08-04T18:16:57.93+00:00","url":"https://junglewise.ai/threats/cve-2026-70470-flowise-pyodide-validator-unicode-homoglyph-bypass-in-csv-and"},{"cve":"CVE-2026-69264","cvss":9.8,"epss":0.0111,"slug":"cve-2026-69264-flowise-flowise-rce-via-python-injection-in-csvagent","title":"Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code temp","severity":"critical","exploited":false,"published_at":"2026-08-04T18:16:57.027+00:00","url":"https://junglewise.ai/threats/cve-2026-69264-flowise-flowise-rce-via-python-injection-in-csvagent"},{"cvss":4,"slug":"flowise-arbitrary-file-write-in-s3-directory-document-loader-ddfb933e","title":"Flowise arbitrary file write in S3 Directory document loader","severity":"medium","exploited":false,"published_at":"2026-08-04T17:43:45+00:00","url":"https://junglewise.ai/threats/flowise-arbitrary-file-write-in-s3-directory-document-loader-ddfb933e"},{"cvss":7.2,"slug":"flowise-arbitrary-file-write-via-path-traversal-in-s3-document-loaders-a834fe1c","title":"Flowise arbitrary file write via path traversal in S3 document loaders","severity":"high","exploited":false,"published_at":"2026-08-04T17:43:45+00:00","url":"https://junglewise.ai/threats/flowise-arbitrary-file-write-via-path-traversal-in-s3-document-loaders-a834fe1c"},{"cve":"CVE-2026-69263","cvss":9.8,"epss":0.0066,"slug":"cve-2026-69263-flowise-rce-via-mcp-environment-variable-blocklist-bypass","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for bl","severity":"critical","exploited":false,"published_at":"2026-08-04T17:17:01.683+00:00","url":"https://junglewise.ai/threats/cve-2026-69263-flowise-rce-via-mcp-environment-variable-blocklist-bypass"},{"cve":"CVE-2026-69259","cvss":8.8,"epss":0.0082,"slug":"cve-2026-69259-flowise-remote-code-execution-in-sqlite-record-manager-node","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in p","severity":"critical","exploited":false,"published_at":"2026-08-04T17:17:01.413+00:00","url":"https://junglewise.ai/threats/cve-2026-69259-flowise-remote-code-execution-in-sqlite-record-manager-node"},{"cve":"CVE-2026-69256","cvss":8.8,"epss":0.0101,"slug":"cve-2026-69256-flowise-csvagent-remote-code-execution-via-pandas-read-pickle","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent node allowed users to","severity":"critical","exploited":false,"published_at":"2026-08-04T17:17:00.707+00:00","url":"https://junglewise.ai/threats/cve-2026-69256-flowise-csvagent-remote-code-execution-via-pandas-read-pickle"},{"cve":"CVE-2026-69255","cvss":8.8,"epss":0.0072,"slug":"cve-2026-69255-flowise-csv-agent-remote-code-execution-via-pyodide-code","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components","severity":"critical","exploited":false,"published_at":"2026-08-04T17:17:00.57+00:00","url":"https://junglewise.ai/threats/cve-2026-69255-flowise-csv-agent-remote-code-execution-via-pyodide-code"},{"cve":"CVE-2026-69254","cvss":8.8,"epss":0.0069,"slug":"cve-2026-69254-flowise-nodevm-sandbox-escape-in-executejavascriptcode","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted ca","severity":"critical","exploited":false,"published_at":"2026-08-04T16:16:29.243+00:00","url":"https://junglewise.ai/threats/cve-2026-69254-flowise-nodevm-sandbox-escape-in-executejavascriptcode"},{"cve":"CVE-2026-69253","cvss":8.8,"epss":0.0066,"slug":"cve-2026-69253-flowise-javascript-sandbox-escape-to-rce","title":"Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-t","severity":"high","exploited":false,"published_at":"2026-08-04T16:16:29.1+00:00","url":"https://junglewise.ai/threats/cve-2026-69253-flowise-javascript-sandbox-escape-to-rce"},{"cve":"CVE-2026-69251","cvss":8.8,"epss":0.0274,"slug":"cve-2026-69251-flowise-rce-via-typeorm-datasource-configuration","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent me","severity":"critical","exploited":false,"published_at":"2026-08-04T15:16:44.43+00:00","url":"https://junglewise.ai/threats/cve-2026-69251-flowise-rce-via-typeorm-datasource-configuration"},{"cve":"CVE-2026-56273","cvss":6.5,"epss":0.005,"slug":"cve-2026-56273-flowise-path-traversal-in-faiss-and-simplestore-vector-stores","title":"Flowise path traversal in Faiss and SimpleStore vector stores","severity":"medium","exploited":false,"published_at":"2026-07-08T14:17:15.8+00:00","url":"https://junglewise.ai/threats/cve-2026-56273-flowise-path-traversal-in-faiss-and-simplestore-vector-stores"},{"cvss":7.1,"slug":"flowise-execute-flow-node-server-side-request-forgery-198e44fc","title":"Flowise Execute Flow node server-side request forgery","severity":"high","exploited":false,"published_at":"2026-06-23T15:32:36+00:00","url":"https://junglewise.ai/threats/flowise-execute-flow-node-server-side-request-forgery-198e44fc"},{"cve":"CVE-2026-56275","cvss":7.1,"epss":0.0032,"slug":"cve-2026-56275-flowise-ssrf-in-execute-flow-node","title":"Flowise SSRF in Execute Flow node","severity":"high","exploited":false,"published_at":"2026-06-23T13:16:45.223+00:00","url":"https://junglewise.ai/threats/cve-2026-56275-flowise-ssrf-in-execute-flow-node"},{"cve":"CVE-2026-56274","cvss":9.9,"epss":0.0752,"slug":"cve-2026-56274-flowise-os-command-injection-in-custom-mcp-server-feature","title":"Flowise OS command injection in Custom MCP Server feature","severity":"critical","exploited":false,"published_at":"2026-06-23T13:16:45.083+00:00","url":"https://junglewise.ai/threats/cve-2026-56274-flowise-os-command-injection-in-custom-mcp-server-feature"},{"cvss":8.8,"slug":"flowise-mcp-security-bypass-leading-to-rce-974e8711","title":"Flowise MCP security bypass leading to RCE","severity":"high","exploited":false,"published_at":"2026-05-14T14:57:30+00:00","url":"https://junglewise.ai/threats/flowise-mcp-security-bypass-leading-to-rce-974e8711"},{"cve":"CVE-2026-43995","cvss":9.8,"epss":0.0048,"slug":"cve-2026-43995-flowise-ssrf-protection-bypass-in-multiple-tool-components","title":"Flowise SSRF protection bypass in multiple tool components","severity":"critical","exploited":false,"published_at":"2026-05-11T18:16:37.66+00:00","url":"https://junglewise.ai/threats/cve-2026-43995-flowise-ssrf-protection-bypass-in-multiple-tool-components"},{"cve":"CVE-2026-41264","cvss":9.8,"epss":0.0117,"slug":"cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution","title":"Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","severity":"critical","exploited":false,"published_at":"2026-04-21T20:19:52+00:00","url":"https://junglewise.ai/threats/cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution"},{"cve":"CVE-2026-41265","cvss":9.8,"epss":0.0056,"slug":"cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution","title":"Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability","severity":"critical","exploited":false,"published_at":"2026-04-18T00:46:04+00:00","url":"https://junglewise.ai/threats/cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution"},{"cve":"CVE-2026-41274","cvss":4,"epss":0.0074,"slug":"cve-2026-41274-flowise-cypher-injection-in-graphcypherqachain","title":"Flowise: Cypher Injection in GraphCypherQAChain","severity":"high","exploited":false,"published_at":"2026-04-16T21:54:26+00:00","url":"https://junglewise.ai/threats/cve-2026-41274-flowise-cypher-injection-in-graphcypherqachain"},{"cve":"CVE-2026-41271","cvss":7.1,"epss":0.0034,"slug":"cve-2026-41271-flowise-apichain-prompt-injection-ssrf-in-get-post-api-chains","title":"Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains","severity":"high","exploited":false,"published_at":"2026-04-16T21:52:11+00:00","url":"https://junglewise.ai/threats/cve-2026-41271-flowise-apichain-prompt-injection-ssrf-in-get-post-api-chains"},{"cve":"CVE-2026-41272","cvss":7.1,"epss":0.0035,"slug":"cve-2026-41272-flowise-ssrf-protection-bypass-toctou-default-insecure","title":"Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)","severity":"high","exploited":false,"published_at":"2026-04-16T21:51:00+00:00","url":"https://junglewise.ai/threats/cve-2026-41272-flowise-ssrf-protection-bypass-toctou-default-insecure"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":9,"exploited":0,"vulnerabilities":12},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"flowise (npm)","slug":"flowise","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/flowise"},{"name":"vm2 (npm)","slug":"vm2","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/vm2"},{"name":"@budibase/server (npm)","slug":"budibase-server","vulnerabilities":61,"url":"https://junglewise.ai/threats/technologies/budibase-server"},{"name":"directus (npm)","slug":"directus","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/directus"},{"name":"nocodb (npm)","slug":"nocodb","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/nocodb"},{"name":"hono (npm)","slug":"hono","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/hono"},{"name":"parse-server (npm)","slug":"parse-server","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/parse-server"},{"name":"dompurify (npm)","slug":"dompurify","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/dompurify"},{"name":"ghost (npm)","slug":"ghost","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/ghost"},{"name":"astro (npm)","slug":"astro","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/astro"},{"name":"@anthropic-ai/claude-code (npm)","slug":"anthropic-ai-claude-code","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/anthropic-ai-claude-code"},{"name":"9router (npm)","slug":"9router","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/9router"}],"technology":{"hub":true,"name":"flowise-components (npm)","slug":"flowise-components","vendor":{"name":"npm","slug":"npm","url":"https://junglewise.ai/threats/vendors/npm"},"aliases":[],"homepage":"https://flowiseai.com/","repo_url":"https://github.com/FlowiseAI/Flowise","description":"A collection of custom components and nodes for the Flowise low-code platform.","url":"https://junglewise.ai/threats/technologies/flowise-components"},"most_severe":[{"cve":"CVE-2026-56274","cvss":9.9,"epss":0.0752,"slug":"cve-2026-56274-flowise-os-command-injection-in-custom-mcp-server-feature","title":"Flowise OS command injection in Custom MCP Server feature","severity":"critical","exploited":false,"published_at":"2026-06-23T13:16:45.083+00:00","url":"https://junglewise.ai/threats/cve-2026-56274-flowise-os-command-injection-in-custom-mcp-server-feature"},{"cve":"CVE-2026-40933","cvss":9.9,"epss":0.0128,"slug":"cve-2026-40933-flowise-flowise-authenticated-rce-in-mcp-adapters","title":"Flowise Flowise authenticated RCE in MCP Adapters","severity":"critical","exploited":false,"published_at":"2026-04-16T21:18:17+00:00","url":"https://junglewise.ai/threats/cve-2026-40933-flowise-flowise-authenticated-rce-in-mcp-adapters"},{"cve":"CVE-2026-41264","cvss":9.8,"epss":0.0117,"slug":"cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution","title":"Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","severity":"critical","exploited":false,"published_at":"2026-04-21T20:19:52+00:00","url":"https://junglewise.ai/threats/cve-2026-41264-flowise-csv-agent-prompt-injection-remote-code-execution"},{"cve":"CVE-2026-69264","cvss":9.8,"epss":0.0111,"slug":"cve-2026-69264-flowise-flowise-rce-via-python-injection-in-csvagent","title":"Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code temp","severity":"critical","exploited":false,"published_at":"2026-08-04T18:16:57.027+00:00","url":"https://junglewise.ai/threats/cve-2026-69264-flowise-flowise-rce-via-python-injection-in-csvagent"},{"cve":"CVE-2026-70470","cvss":9.8,"epss":0.0097,"slug":"cve-2026-70470-flowise-pyodide-validator-unicode-homoglyph-bypass-in-csv-and","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFr","severity":"critical","exploited":false,"published_at":"2026-08-04T18:16:57.93+00:00","url":"https://junglewise.ai/threats/cve-2026-70470-flowise-pyodide-validator-unicode-homoglyph-bypass-in-csv-and"},{"cve":"CVE-2026-70477","cvss":9.8,"epss":0.0081,"slug":"cve-2026-70477-flowise-rce-via-csv-agent-prompt-injection","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection sent to a chatfl","severity":"critical","exploited":false,"published_at":"2026-08-04T20:16:54.473+00:00","url":"https://junglewise.ai/threats/cve-2026-70477-flowise-rce-via-csv-agent-prompt-injection"},{"cve":"CVE-2026-69263","cvss":9.8,"epss":0.0066,"slug":"cve-2026-69263-flowise-rce-via-mcp-environment-variable-blocklist-bypass","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for bl","severity":"critical","exploited":false,"published_at":"2026-08-04T17:17:01.683+00:00","url":"https://junglewise.ai/threats/cve-2026-69263-flowise-rce-via-mcp-environment-variable-blocklist-bypass"},{"cve":"CVE-2026-41265","cvss":9.8,"epss":0.0056,"slug":"cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution","title":"Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability","severity":"critical","exploited":false,"published_at":"2026-04-18T00:46:04+00:00","url":"https://junglewise.ai/threats/cve-2026-41265-flowise-airtable-agent-code-injection-remote-code-execution"},{"cve":"CVE-2026-43995","cvss":9.8,"epss":0.0048,"slug":"cve-2026-43995-flowise-ssrf-protection-bypass-in-multiple-tool-components","title":"Flowise SSRF protection bypass in multiple tool components","severity":"critical","exploited":false,"published_at":"2026-05-11T18:16:37.66+00:00","url":"https://junglewise.ai/threats/cve-2026-43995-flowise-ssrf-protection-bypass-in-multiple-tool-components"},{"cve":"CVE-2026-69251","cvss":8.8,"epss":0.0274,"slug":"cve-2026-69251-flowise-rce-via-typeorm-datasource-configuration","title":"Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent me","severity":"critical","exploited":false,"published_at":"2026-08-04T15:16:44.43+00:00","url":"https://junglewise.ai/threats/cve-2026-69251-flowise-rce-via-typeorm-datasource-configuration"}],"generated_at":"2026-09-26T10:14:00.201383+00:00"}