15:28
2026-08-09
dev.to
ai-safety
How to Close the Flowise CSV Agent Prompt Injection Hole Today
A newly disclosed vulnerability, CVE-2026-70477, affects Flowise's CSV Agent node, allowing prompt injection via malicious CSV files to hijack chatflows. The fix requires upgrading to Flowise 3.1.3, b…