CVE-2026-67620 is an SSRF vulnerability in Flowise through version 3.1.4. The vulnerability arises from the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST does not include the Oracle Cloud Infrastructure metadata endpoint (192.0.0.192) and the Alibaba Cloud metadata endpoint (100.100.100.200). Attackers can exploit this by sending crafted URL parameters to the fetch-links API endpoint, bypassing deny-list validation including redirect-based bypasses. This enables access to cloud instance metadata services, exposing sensitive instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments. Additionally, unauthenticated exploitation is possible if URL-fetching nodes exist in public chatflows.

Successful exploitation can lead to disclosure of sensitive instance metadata and role credentials on Oracle Cloud Infrastructure and Alibaba Cloud environments where Flowise is deployed. This could allow attackers to gain unauthorized access to cloud resources by leveraging exposed credentials. The vulnerability requires at least authenticated access except in scenarios involving public chatflows with URL-fetching nodes, where unauthenticated exploitation is possible. The CVSS 4.0 score is 6.3 (medium severity), reflecting network attack vector, low complexity, no privileges required for exploitation in some cases, and high scope impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the fetch-links API endpoint and avoid deploying URL-fetching nodes in public chatflows. Monitor for updates from FlowiseAI regarding patches or official mitigations.