https://vulnerability.circl.lu/sightings/feed 2026-08-05T07:52:43.618060+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4e3972eb-1f51-467f-815e-4d38dcae6839/export 2026-08-05T07:52:43.637894+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4e3972eb-1f51-467f-815e-4d38dcae6839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70477", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscoxl33nt2c", "content": "CRITICAL: FlowiseAI Flowise <3.1.3 vulnerable to CVE-2026-70477 code injection. Attackers can run arbitrary Python via CSV Agent node. Upgrade to 3.1.3+ immediately. https://radar.offseq.com/threat/cve-2026-70477-cwe-94-improper-control-of-generation-of-code-code-injection-in-flowiseai-flowise-52...", "creation_timestamp": "2026-08-05T04:30:29.395804Z"} 2026-08-05T04:30:29.395804+00:00 https://vulnerability.circl.lu/sighting/7478470d-db86-4cf0-850d-93c15cd2a495/export 2026-08-05T07:52:43.640858+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7478470d-db86-4cf0-850d-93c15cd2a495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70477", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117041019348392384", "content": "FlowiseAI Flowise <3.1.3 is affected by CRITICAL CVE-2026-70477 (code injection, CVSS 9.5). Exploitation via CSV Agent node allows arbitrary Python execution. Patch to 3.1.3+ ASAP. https://radar.offseq.com/threat/cve-2026-70477-cwe-94-improper-control-of-generation-of-code-code-injection-in-flowiseai-flowise-52ff32a90a84fd22 #OffSeq #Infosec #CVE #AppSec", "creation_timestamp": "2026-08-05T04:30:26.592054Z"} 2026-08-05T04:30:26.592054+00:00 https://vulnerability.circl.lu/sighting/f3a0f4e8-ecd4-4ae4-b021-121619648d87/export 2026-08-05T07:52:43.640961+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "f3a0f4e8-ecd4-4ae4-b021-121619648d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70477", "type": "published-proof-of-concept", "source": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr", "content": "", "creation_timestamp": "2026-08-04T20:35:19.057425Z"} 2026-08-04T20:35:19.057425+00:00 https://vulnerability.circl.lu/sighting/e3a7a407-3628-4121-8d91-3e43777ec0fb/export 2026-08-05T07:52:43.641742+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e3a7a407-3628-4121-8d91-3e43777ec0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70477", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt4g2hcj2z", "content": "CVE-2026-70477 - flowise\nFlowise, a chatflow platform, has a vulnerability that allows attackers to inject malicious code into the system. This can happen if an attacker sends a special type of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #npm #CVE #infosec", "creation_timestamp": "2026-08-04T20:12:05.626808Z"} 2026-08-04T20:12:05.626808+00:00