npm/flowise-components CVE-2026-69259: high 8.8, EPSS 0.82%

Flowise RCE via SQLite Record Manager Node

Action: Upgrade flowise-components to 3.1.3 or later.

npm i flowise-components@3.1.3

Affected

Fixed versions

Sources

• osv: GHSA-x3hf-7cj6-3r4m#npm/flowise-components
• nvd: CVE-2026-69259
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m
• https://github.com/FlowiseAI/Flowise/pull/6464
• https://github.com/FlowiseAI/Flowise/commit/d07186844263bad057008863037466aff7c3390f
• https://github.com/FlowiseAI/Flowise
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3

CVE-2026-69259 · published 2026-08-04T16:05:10Z · modified 2026-08-04T16:26:02.691996Z · JSON