← Back to feed
advisories Zero Day Initiative

ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

Zero Day Initiative

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vul...

T1190 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Sep 21 advisories TerminalFix: PNG Steganography, (Mon, Sep 21st) SANS ISC · Sep 21 advisories ISC Stormcast For Monday, September 21st, 2026 https://isc.sans.edu/podcastdetail/10102, (Mon, Sep 21st) SANS ISC · Sep 21