#FlowiseAI

Prompt injection in Flowise CSV Agents enables remote code execution via Python scripts

A critical vulnerability in the Flowise `CSV_Agents` class allows unauthenticated attackers to execute arbitrary code on the host server via prompt injection.