Tag

#CVE-2026-41264

1 published story tagged with CVE-2026-41264.

criticalExploited VulnerabilitiesJul 10, 2026·3 min read

Prompt injection in Flowise CSV Agents enables remote code execution via Python scripts

A critical vulnerability in the Flowise `CSV_Agents` class allows unauthenticated attackers to execute arbitrary code on the host server via prompt injection.