← back to feed
CVE-2026-69255

CVE-2026-69255

validatedZero produced an exploit or a check.

GHSA-vmv7-4m6c-3cg5 ↗EUVD-2026-52745 ↗

check availableZero validated a working check for it.not proven exploitableZero has a detection check, but hasn't produced a full working exploit yet.
cve.orgpublic pocExploit code has been published by someone. Source signals can also carry a PoC (Proof of Concept).−5.8dkevAttacks confirmed in the real world.+42d
FlowiseAI Flowise <= 3.1.2
fixed in 3.1.3
CWE-94 Improper Control of Generation of Code ('Code Injection')
ETK-2026-71, permanent identifier
pkg:npm/flowise
pkg:npm/flowise-components
cvss8.8nvdCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
+56dTTV
22mAI analysisAnalysis: how long the AI spent reversing this signal.
Check if you are vulnerable
timeline
0 = cve.org publication
public poc−5.8dcve.org publicationtrigger signal +41dkev+42dcheck available+56dagent stopped
0
+20d
+60d

description

Flowise versions before 3.1.3 are affected by code injection in the CSVAgent component when processing attacker-controlled CSV data. An authenticated attacker able to submit such data may execute operating-system commands in the Flowise container.

mitigation

Upgrade Flowise to version 3.1.3 or later. Until upgraded, restrict access to CSVAgent functionality to trusted authenticated users and prevent untrusted CSV uploads.

fixed in 3.1.3

check
available
exploit
no
automationDeterministic: a check that runs on its own, the same request on every target. Contextual: an agentic technique that needs to be applied per target, for bugs that depend on contextual flows.
deterministic
auth requiredWhether an attacker needs an account first, based on the CVSS vector's Privileges Required.
yes, low privileges
EPSSEstimate of the chance this CVE is exploited in the next 30 days. Refreshed daily.
0.60%47th percentile
agent run time
22m
cve.org record, t = 0The moment cve.org publishes the CVE in full.
2026-08-04 15:39Z
Δ to public pocExploit code has been published by someone. Source signals can also carry a PoC (Proof of Concept).
−5.8d
Δ to kevAttacks confirmed in the real world.
+42d

outcome

Check only, differential: the check fires on the vulnerable build and is silent on the patched one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

  1. 2026-07-29 21:08Z
  2. 2026-08-04 15:39Z
  3. 2026-09-15
    vulncheck_kev: trigger signal, started the run
    https://vulncheck.com/cve/CVE-2026-69255
  4. 2026-09-15 00:00Z
  5. 2026-10-15 07:07Z
    Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
    thehackernews · https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html

this entry in the feed

GET /api/v1/feed/CVE-2026-69255

{
  "etk_id": "ETK-2026-71",
  "cve_id": "CVE-2026-69255",
  "display_id": "CVE-2026-69255",
  "ghsa_id": "GHSA-vmv7-4m6c-3cg5",
  "euvd_id": "EUVD-2026-52745",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Code injection in Flowise CSVAgent",
  "summary": "Flowise versions before 3.1.3 are affected by code injection in the CSVAgent component when processing attacker-controlled CSV data. An authenticated attacker able to submit such data may execute operating-system commands in the Flowise container.",
  "mitigation": "Upgrade Flowise to version 3.1.3 or later. Until upgraded, restrict access to CSVAgent functionality to trusted authenticated users and prevent untrusted CSV uploads.",
  "vendor": "FlowiseAI",
  "product": "Flowise",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 3.1.2"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        "3.1.3"
      ],
      "package_name": "flowise",
      "purl": "pkg:npm/flowise"
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 3.1.2"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        "3.1.3"
      ],
      "package_name": "flowise-components",
      "purl": "pkg:npm/flowise-components"
    }
  ],
  "cwes": [
    94
  ],
  "cvss_score": 8.8,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.006,
  "epss_percentile": 0.4783,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 21.541363333333333,
  "t0_at": "2026-08-04T15:39:39.166000+00:00",
  "signals": {
    "check": {
      "at": "2026-09-30T03:13:45.242252+00:00",
      "days": 56.48201477143518,
      "is_lower_bound": false,
      "measured_at": "2026-08-04T15:39:39.166000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-09-15T00:00:00+00:00",
      "days": 42,
      "is_lower_bound": false,
      "measured_at": "2026-08-04T15:39:39.166000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-69255"
    },
    "public_poc": {
      "at": "2026-07-29T21:08:36+00:00",
      "days": -5.771564421296296,
      "is_lower_bound": false,
      "measured_at": "2026-08-04T15:39:39.166000+00:00",
      "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vmv7-4m6c-3cg5"
    },
    "trigger_signal": {
      "at": "2026-09-15T00:00:00+00:00",
      "days": 41.347463356481484,
      "is_lower_bound": false,
      "measured_at": "2026-08-04T15:39:39.166000+00:00",
      "url": "https://vulncheck.com/cve/CVE-2026-69255"
    }
  }
}

published 2026-09-30 02:52Z
last change 2026-10-21 06:34Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.

Protected by reCAPTCHA; the Google Privacy Policy and Terms of Service apply.