Code injection in Flowise CSVAgent leads to remote code execution (CVE-2026-41137)

The CSVAgent component in Flowise accepts user-supplied custom Pandas CSV read code that is interpolated directly into an executable code string without sanitization and run via `pyodide.runPythonAsync`. An authenticated attacker can craft a malicious payload to achieve arbitrary command execution on the server; if `FLOWISE_USERNAME` and `FLOWISE_PASSWORD` are not configured, the authentication requirement can be bypassed by supplying the `x-request-from: internal` header, making the attack unauthenticated. Affected versions: - npm flowise <= 3.0.13 - npm flowise-components <= 3.0.13 We recommend updating to: 3.1.0. CVSS 9.4 · our assessment: act_now Reference: https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9wc7-mj3f-74xv Details: https://vuln.today/cve/CVE-2026-41137