CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability
Flowise
Flowise contains a sandbox escape flaw that fails to block native Pandas DataFrame methods. Authenticated attackers can exploit this to exfiltrate uploaded data or write arbitrary files to the server.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 8.6
- EPSS
- <0.01 · top 62% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 13 Aug 2026
- last update
- 13 Aug 2026
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2026-08-13CVE-2026-73484: Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas…NVD · nvd.nist.gov/vuln/detail/CVE-2026-73484
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 13 Aug 2026 · first reported 13 Aug 2026
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability https://gcdradar.vercel.app/incidents/cve-2026-73484-flowise-pythoncodevalidator-sandbox-escape-vu · AIR-2026-1285 · closed 2026-08-13 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2026-08-13 - AI role: Attack on AI - Products: Flowise - CVE ids: CVE-2026-73484 - CVSS: 8.6 ## Summary Flowise contains a sandbox escape flaw that fails to block native Pandas DataFrame methods. Authenticated attackers can exploit this to exfiltrate uploaded data or write arbitrary files to the server. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-08-13: CVE-2026-73484: Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas… (https://nvd.nist.gov/vuln/detail/CVE-2026-73484) ## Sources - 2026-08-13 NVD: CVE-2026-73484: Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas… https://nvd.nist.gov/vuln/detail/CVE-2026-73484 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.5Flowise CVE-2026-90535: Flowise Denial of Service Vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90535
AI - closed6.5Flowise CVE-2026-90533: Flowise broken access control vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90533
AI - closed6.5Flowise CVE-2026-90534: Flowise credential resolution permission bypass
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90534
AI - closed9.8Flowise CVE-2026-52098: Flowise remote code execution vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-52098
AI - closed6.3Flowise CVE-2026-73603: Chatflow visibility bypass in Flowise TTS endpoint
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73603
AI - closed9.0Flowise CVE-2026-73486: Code injection in Flowise CSV Agent node
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73486
AI