FlowiseAI's Flowise, a drag-and-drop interface for building customized large language model flows, contained an SSRF vulnerability (CWE-918) in versions before 3.1.0. Specifically, several tools (OpenAPIToolkit.ts, WebScraperTool.ts, MCP/core.ts, Arxiv/core.ts) directly invoked raw HTTP clients such as node-fetch and axios without using a secured wrapper, which could be exploited to perform SSRF attacks. The vulnerability is addressed by updating to Flowise version 3.1.0, where these tools use the secured HTTP client wrapper.

The vulnerability allows an attacker with at least limited privileges (PR:L) to potentially induce the server to make unauthorized HTTP requests to internal or external systems, which could lead to information disclosure or interaction with unintended network resources. The CVSS 4.0 vector indicates low to limited impact on confidentiality, integrity, and availability, consistent with a medium severity rating.

Upgrade Flowise to version 3.1.0 or later, where the SSRF vulnerability is fixed by replacing raw HTTP client usage with a secured wrapper. Since this is an on-premises product, users must apply this update themselves. Patch status is confirmed by the vendor's versioning information.