An authenticated code injection vulnerability in Flowise allows attackers to achieve full system compromise, necessitating an immediate update to version 3.1.0.

The vulnerability is a code injection flaw (CWE-94) within the CSVAgent component. It allows an authenticated user to supply malicious input for Pandas CSV read operations, resulting in unauthorized command execution on the host server.

Successful exploitation of this flaw allows an attacker to execute arbitrary code with the privileges of the application process. Given the CVSS score of 8.8, this represents a high-severity risk that could lead to full system takeover, unauthorized access to sensitive large language model data, and potential lateral movement within the network.

Immediate Action: Update both Flowise and flowise-components to version 3.1.0 or later immediately to incorporate the necessary sanitization logic.

Proactive Monitoring: Monitor server logs for suspicious process execution patterns or unusual file system activity originating from the Flowise service account.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious payloads typically associated with command or code injection attempts.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk to the integrity and availability of the Flowise environment. Administrators must prioritize updating to version 3.1.0 to eliminate the injection vector. Failure to patch may expose the underlying host infrastructure to complete unauthorized control by authenticated users.