Flowise versions prior to 3.1.0 are vulnerable to remote code execution, posing a critical risk to systems utilizing the AirtableAgent component.

The vulnerability is a code injection flaw (CWE-94) within the AirtableAgent.ts file, where user-supplied input is passed directly into Python code without sanitization. An authenticated user can leverage this lack of input verification to execute arbitrary code on the underlying system.

The ability to execute arbitrary code allows an attacker to gain complete control over the affected server, potentially leading to unauthorized data access, system compromise, or lateral movement within the network. With a CVSS score of 8.8, this vulnerability represents a high-severity risk that could lead to significant operational disruption and data loss.

Immediate Action: Update Flowise and flowise-components to version 3.1.0 or later immediately to resolve the vulnerable code path in AirtableAgent.ts.

Proactive Monitoring: Review application access logs for unusual queries or characters within prompt template parameters that might indicate an attempt to inject malicious code.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict input validation rules to block malicious payloads targeting the affected agent interface until the update can be deployed.

Public Exploit Available: Unknown.

Given the potential for remote code execution and the existence of a proof-of-concept, this vulnerability must be addressed with high priority. Organizations using Flowise should verify their current version and apply the 3.1.0 update across all environments to eliminate the injection vector. Continued monitoring of administrative and agent-related traffic is recommended to ensure no unauthorized activity has occurred.