Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit
Rapid7 has added new exploit modules to the Metasploit Framework targeting two recently discovered vulnerabilities in FlowiseAI and macOS PackageKit. The FlowiseAI CSV Agent flaw (CVE-2026-41264) allows unauthenticated remote code execution via a malicious CSV file, while the macOS PackageKit vulnerability (CVE-2024-27822) enables local privilege escalation through ZSH environment manipulation. These additions expand the attack surface of AI tools and operating systems, highlighting the importance of timely patching.
More AI, more software, more bugs!
AI, it's all you hear about nowadays and everyone's got an opinion on it. Here at Metasploit, we care less about those opinions and more about the growing attack surface all this new software brings with it (yeehaw exploits!). Take for example the new Flowise CSV Agent Prompt Injection RCE brought to you by Takahiro Yokoyama and zdi-disclosures. Flowise is an open-source tool that lets you build AI apps and chatbots using a visual, drag-and-drop canvas and CVE-2026-41264 is an unauthenticated RCE run method of the CSV_Agents class in Flowise. The vulnerability exists due insufficient sandboxing and an incomplete list of disallowed inputs. It allows unauthenticated attackers to upload a .csv file containing arbitrary python code and execute it. One moment you're using AI to help draft and email and the next moment you're getting pwn'd, what a world we live in! Happy Friday and happy hacking everyone.…