CVE-2026-69251

CRITICALNuclei

Flowise RCE via TypeORM DataSource

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-69251 has a selected CVSS score of 9.0 (critical); EIP currently links 1 Nuclei template.

Description

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in packages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscribers, and migrations can load local JavaScript files, allowing an authenticated user to execute arbitrary code on the server by uploading a JavaScript payload and referencing it from additionalConfig.entities. This issue is fixed in version 3.1.3.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 4, 2026 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

Flowise

Browse FlowiseAI / Flowise
CVE List< 3.1.3affected

flowise-components

Browse FlowiseAI / flowise-components
CVE List< 3.1.3affected

flowise

Browse npm / flowise
GitHub AdvisoryBefore 3.1.3 · Fixed in 3.1.3affected

flowise-components

Browse npm / flowise-components
GitHub AdvisoryBefore 3.1.3 · Fixed in 3.1.3affected

Nuclei templates

1
ProjectDiscoveryCRITICALFlowise < 3.1.3 - Remote Code ExecutionCVSS 9

Flowise prior to 3.1.3 contains a remote code execution vulnerability caused by allowing authenticated users to set arbitrary TypeORM DataSource options including entities that load local JavaScript files, letting authenticated users execute arbitrary code on the server, exploit requires user authentication.

Impact

Authenticated users can execute arbitrary code on the server, potentially leading to full system compromise.

Remediation

Update to version 3.1.3 or later.

WeaknessesCWE-94
Authors1dayexploit
Template tagscvecve2026flowiserceauthenticatedtypeormintrusive
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Shodan: http.title:"Flowise"
FOFA: title="Flowise"
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-g32j-mmxr-gfq5 https://github.com/FlowiseAI/Flowise/commit/d07186844263bad057008863037466aff7c3390f https://nvd.nist.gov/vuln/detail/CVE-2026-69251

Source: ProjectDiscovery

References

2