Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit
2026-07-11T07:23:40Z•b95806effab131c3f72c1e3a09dfdfeb76fa7c0281856f2caf5a13ff87590574
CSV AgentCVE-2026-41264FlowiseMetasploitTakahiro Yokoyamaexploit-modulefile uploadinput validationprompt injectionremote code executionsandboxingunauthenticatedzdi-disclosures
What happened
Rapid7 reports a new unauthenticated remote code execution (RCE) in Flowise’s CSV Agent (CVE-2026-41264). Due to insufficient sandboxing and an incomplete blacklist of disallowed inputs, an attacker can upload a crafted .csv containing arbitrary Python and trigger execution on the Flowise host. Metasploit has an exploit module (multi/http/flowise_auth_rce_cve_2026_41264) contributed by Takahiro Yokoyama and ZDI; affected users should apply vendor fixes or block/disable CSV agent file uploads, harden sandboxing, and validate/whitelist input processing immediately.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- b95806effab131c3f72c1e3a09dfdfeb76fa7c0281856f2caf5a13ff87590574
- Enrichment time
- 2026-07-11T07:23:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.