CVE-2026-67620 Details

A server-side request forgery (SSRF) vulnerability has been identified in Flowise versions through 3.1.4. The issue arises from an incomplete deny-list in the SSRF guard within httpSecurity.ts, which fails to block access to the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200. This oversight allows authenticated attackers to manipulate the server into making arbitrary GET requests to cloud instance metadata services. The vulnerability can be exploited by sending requests to the fetch-links API endpoint with a crafted URL parameter, bypassing the deny-list validation, including redirects. As a result, instance identity data and role credentials on affected Oracle or Alibaba Cloud deployments can be exposed. Additionally, if URL-fetching nodes are present in public chatflows, this access could be gained without authentication.

No vendor patch will be issued as the Flowise project has been sunset. Operators are advised to switch from a deny-list to an allow-list approach, blocking the omitted metadata IPs and ranges at the network layer, auditing public chatflows for URL-fetching nodes, enforcing provider-specific metadata access controls, and considering migration off Flowise.