Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-91935

Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata services or internal hosts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FlowiseAI Flowise

Default version status: unaffected

  • 0 to < 3.1.4affected
  • 3.1.4unaffected
pkg:npm/flowise

FlowiseAI Flowise

Default version status: unaffected

  • 0 to < 3.1.4affected
  • 3.1.4unaffected
pkg:npm/flowise-components

References