CVE-2026-70470

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide and full OS command execution on the Flowise host via Pyodide js module interop. The validator gates pyodide.runPythonAsync in packages/components/nodes/agents/CSVAgent/CSVAgent.ts and packages/components/nodes/agents/AirtableAgent/AirtableAgent.ts with an ASCII word-boundary blacklist. JavaScript regex word boundaries are ASCII-only, while Python 3 NFKC-normalizes identifiers at parse time, so homoglyph forms such as __cl𝐚ss__, __subcl𝐚sses__, __b𝐚se__, and __b𝐮iltins__ bypass the blacklist and are parsed as their ASCII equivalents. This issue is fixed in version 3.1.3.

• CWE-184

• https://github.com/FlowiseAI/Flowise/commit/f4e2794f6a576b94578f2fdafbf49c2fb304626c
• https://github.com/FlowiseAI/Flowise/pull/6499
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-52fh-8v99-63c2

Published

Aug 4, 2026

Last Modified

Aug 4, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7046The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…4.9
• CVE-2026-70465A buffer copy without checking size of input ('classic buffe…8.1
• CVE-2026-70466A incomplete list of disallowed inputs vulnerability in Fort…5.3
• CVE-2026-70467A server-side request forgery (ssrf) vulnerability in Fortin…3.8
• CVE-2026-70468A authentication bypass using an alternate path or channel v…8.1
• CVE-2026-7047The Frontend User Notes plugin for WordPress is vulnerable t…4.3
• CVE-2026-70471Flowise is a drag-and-drop user interface for building custo…7.1
• CVE-2026-70472Flowise is a drag & drop user interface to build a customize…7.1
• CVE-2026-70473Flowise is a drag-and-drop user interface for building custo…8.3
• CVE-2026-70474Flowise is a drag-and-drop user interface for building custo…7.6
• CVE-2026-70475Flowise is a drag & drop user interface to build a customize…7.1
• CVE-2026-70476Flowise is a drag & drop user interface to build a customize…8.3