Most recent entries from all

bdu:2026-03236

2026-10-17T20:22:05.857145+00:00

bdu:2026-03236

EUVD-2026-253273

2026-10-17T20:22:05.857177+00:00

EUVD-2026-253273

fkie_cve-2025-59527

2026-10-17T20:22:05.857192+00:00

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.

GHSA-hr92-4q35-4j3m — FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

2026-10-17T20:22:05.857221+00:00

Affected: npm: flowise

### Summary ---

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the `/api/v1/fetch-links` endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. The impact includes the potential exposure of sensitive internal administrative endpoints.

### Details ---

#### Vulnerability Overview

The `fetch-links` feature in Flowise is designed to extract links from external websites or XML sitemaps. It performs an HTTP request from the server to the user-supplied URL and parses the response (HTML or XML) to extract and return links.

The issue arises because the feature performs these HTTP requests **without validating the user-supplied URL**. In particular, when the `relativeLinksMethod` parameter is set to `webCrawl` or `xmlScrape`, the server directly calls the `fetch()` function with the provided URL, making it vulnerable to SSRF attacks.

#### Root Cause

The `fetch()` function is called without URL validation or restriction, which enables attackers to redirect the server to internal services.

### Taint Flow

#### • Taint 01: Route Registration

https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/controllers/fetch-links/index.ts#L6-L24

#### • Taint 02: Service

https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/services/fetch-l…

WID-SEC-W-2025-2105 — Flowise: Mehrere Schwachstellen

2026-10-17T20:22:05.857282+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Informationen offenzulegen und beliebigen Code auszuführen.