Flowise CSVAgent Command Injection Vulnerability Leading to Remote Code Execution

A command injection vulnerability allowing remote code execution has been identified in Flowise versions through 3.0.13. The issue arises in the CSVAgent component, which permits users to supply custom Pandas CSV reading code. Due to inadequate input sanitization, an attacker can inject a payload that is executed on the server. This vulnerability is addressed in Flowise version 3.1.0.

Impact

Exploitation of this vulnerability allows authenticated users to execute arbitrary code on the server where Flowise is running, potentially leading to a complete compromise of the server.

Reproduction

To reproduce this vulnerability, an authenticated user can create a new chat flow and include a CSVAgent node. The 'customReadCSV' input can be populated with a payload that includes command injection, such as a command to execute on the server. Once the chat flow is executed, the injected command will be executed on the server, demonstrating the vulnerability.

Remediation

Users can upgrade to Flowise version 3.1.0 or later to address this vulnerability.