CVE-2026-67620: Server-Side Request Forgery (SSRF) in FlowiseAI Flowise
Flowise versions up to 3.1.4 contain a server-side request forgery (SSRF) vulnerability in the SSRF guard of httpSecurity.ts. The default deny list omits certain cloud metadata service endpoints for Oracle Cloud Infrastructure and Alibaba Cloud, allowing authenticated attackers to make arbitrary GET requests to these metadata services. This can expose instance identity data and role credentials. In some cases, unauthenticated access is possible when URL-fetching nodes are present in public chatflows.
AI Analysis
Technical Summary
CVE-2026-67620 is a server-side request forgery vulnerability in Flowise through version 3.1.4. The vulnerability arises because the SSRF guard implemented in httpSecurity.ts uses a DEFAULT_DENY_LIST that does not include the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200. This omission allows attackers with authentication to send crafted requests to the fetch-links API endpoint with URLs that bypass deny-list validation, including redirect-based bypasses, to reach cloud instance metadata services. This can lead to exposure of instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments. Additionally, if URL-fetching nodes exist in public chatflows, unauthenticated attackers may exploit this vulnerability.
Potential Impact
The vulnerability allows attackers to force the Flowise server to issue arbitrary GET requests to cloud instance metadata services, potentially exposing sensitive instance identity information and role credentials. This can lead to unauthorized access to cloud resources associated with the affected instances. The impact is significant in cloud environments using Oracle Cloud Infrastructure or Alibaba Cloud. The CVSS 4.0 base score is 6.3, indicating a medium severity level.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the fetch-links API endpoint and avoid using URL-fetching nodes in public chatflows to reduce exposure. Monitor for updates from FlowiseAI regarding patches or mitigations.
CVE-2026-67620: Server-Side Request Forgery (SSRF) in FlowiseAI Flowise
Description
Flowise versions up to 3.1.4 contain a server-side request forgery (SSRF) vulnerability in the SSRF guard of httpSecurity.ts. The default deny list omits certain cloud metadata service endpoints for Oracle Cloud Infrastructure and Alibaba Cloud, allowing authenticated attackers to make arbitrary GET requests to these metadata services. This can expose instance identity data and role credentials. In some cases, unauthenticated access is possible when URL-fetching nodes are present in public chatflows.
CVSS v4.0
Score 6.3medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-67620 is a server-side request forgery vulnerability in Flowise through version 3.1.4. The vulnerability arises because the SSRF guard implemented in httpSecurity.ts uses a DEFAULT_DENY_LIST that does not include the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200. This omission allows attackers with authentication to send crafted requests to the fetch-links API endpoint with URLs that bypass deny-list validation, including redirect-based bypasses, to reach cloud instance metadata services. This can lead to exposure of instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments. Additionally, if URL-fetching nodes exist in public chatflows, unauthenticated attackers may exploit this vulnerability.
Potential Impact
The vulnerability allows attackers to force the Flowise server to issue arbitrary GET requests to cloud instance metadata services, potentially exposing sensitive instance identity information and role credentials. This can lead to unauthorized access to cloud resources associated with the affected instances. The impact is significant in cloud environments using Oracle Cloud Infrastructure or Alibaba Cloud. The CVSS 4.0 base score is 6.3, indicating a medium severity level.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the fetch-links API endpoint and avoid using URL-fetching nodes in public chatflows to reduce exposure. Monitor for updates from FlowiseAI regarding patches or mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-07-29T21:07:39.203Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a775540bf8831d539cccedd
Added to database: 08/08/2026, 16:11:44 UTC
Last enriched: 08/08/2026, 16:31:08 UTC
Last updated: 08/08/2026, 16:31:08 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.