CVE-2026-69259: Flowise RCE via SQLite Record Manager Node
============================================================================= Security Advisory elttam
Topic: Flowise RCE via SQLite Record Manager Node
Module: FlowiseAI/Flowise
Disclosed: 24-Apr-2026
Credits: Alex Brown
Affects: FlowiseAI/Flowise 3.1.2
References
- github.com/FlowiseAI/Flowise/commit/d07186844263bad057008863037466aff7c3390f
- github.com/FlowiseAI/Flowise/pull/6464
- github.com/FlowiseAI/Flowise/releases/tag/flowise@3.1.3
- github.com/FlowiseAI/Flowise/security/advisories/GHSA-x3hf-7cj6-3r4m
- github.com/advisories/GHSA-x3hf-7cj6-3r4m
- nvd.nist.gov/vuln/detail/CVE-2026-69259
Code Behaviors & Features
Detect and mitigate CVE-2026-69259 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →