Topic

#flowise

1 article exploring flowise. Expert insights and analysis from our editorial team.

Showing 1–1 of 1 articles
Related topics:
prompt-injection agent-security rce llm-code-execution sandbox-bypass

Articles

Newest first
Security

Flowise's CVE-2026-41264 Turns an LLM-Written `import` Statement Into Unauthenticated RCE — and Breaks the Regex-Gated Sandbox

CVE-2026-41264 (CVSS 9.8) shows how a regex import allowlist in Flowise's CSV Agent fails when the LLM writes the code: aliasing os as pandas bypasses the filter and reaches.
Browse All Topics