The flaw permits authenticated Flowise users to inject arbitrary TypeORM DataSource options through the additionalConfig field in several record manager and memory node components. By specifying a local JavaScript file in the entities array, an attacker can upload and execute malicious code on the server, which is a classic source‑code injection (CWE‑94). This enables an attacker to compromise confidentiality, integrity, and availability by running code with the server’s process privileges.

The affected products are Flowise and Flowise components from FlowiseAI. Versions older than 3.1.3 that include MySQLRecordManager, PostgresRecordManager, SQLiteRecordManager, and MySQLAgentMemory modules are vulnerable; any deployment that exposes the additionalConfig option for those nodes is at risk.

The CVSS score of 9 indicates a critical severity, though the EPSS score is not available, leaving exploitation probability uncertain. The vulnerability is not listed in the KEV catalog. The attack requires authenticated access to the Flowise UI that allows upload and configuration of additionalConfig. Once an attacker uploads a JavaScript payload and references it, the code runs with server privileges, providing full control over the application.