CVE-2026-67620
Received Received - Intake

SSRF Bypass in Flowise AI via Metadata Endpoint Exposure

Publication date: 2026-08-08

Last updated on: 2026-08-08

Assigner: VulnCheck

Description
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticated attackers to force the server to issue arbitrary GET requests to cloud instance metadata services. Attackers can send requests to the fetch-links API endpoint with a crafted URL parameter, bypassing deny-list validation including redirect-based bypasses, to reach instance metadata services and expose instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments, with unauthenticated access possible when URL-fetching nodes exist in public chatflows.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-08
Last Modified
2026-08-08
Generated
2026-08-08
AI Q&A
2026-08-08
EPSS Evaluated
N/A
NVD
CVE-2026-67620
EUVD
EUVD-2026-54793

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
flowiseai flowise 3.1.4
flowiseai flowise to 3.1.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-67620 is a Server-Side Request Forgery (SSRF) vulnerability in FlowiseAI/Flowise, an AI-agent builder, affecting versions up to and including 3.1.4. The flaw arises from an incomplete deny-list in the application's SSRF protection, which fails to block metadata IP addresses for Oracle Cloud Infrastructure (OCI) and Alibaba Cloud. Specifically, the deny-list omits 192.0.0.192 (Oracle OCI) and 100.100.100.200 (Alibaba Cloud), allowing authenticated users to bypass restrictions and force the server to make arbitrary GET requests to these addresses.

Detection Guidance

To detect this SSRF vulnerability in Flowise, check if your system allows requests to the omitted metadata endpoints (192.0.0.192 for Oracle OCI or 100.100.100.200 for Alibaba Cloud). Test the /api/v1/fetch-links endpoint with crafted URLs targeting these IPs. Monitor server logs for unusual outbound requests to cloud metadata services. Use network-level tools like tcpdump or Wireshark to inspect traffic to these specific IPs.

Impact Analysis

This vulnerability allows attackers to expose sensitive instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments. Attackers can send requests to the fetch-links API endpoint with a crafted URL parameter to bypass deny-list validation and reach instance metadata services. In some cases, unauthenticated access is possible when URL-fetching nodes exist in public chatflows.

Compliance Impact

This SSRF vulnerability could expose sensitive cloud metadata and credentials, potentially violating GDPR's data protection requirements for personal data security and HIPAA's safeguards for protected health information. Unauthorized access to instance metadata may lead to breaches of confidentiality and integrity requirements in these regulations.

Mitigation Strategies

Immediately switch to an allow-list approach for outbound requests, blocking all unspecified destinations. Add the omitted IPs (192.0.0.192, 100.100.100.200) and the 100.64.0.0/10 range to your deny-list. Enforce stricter metadata service protocols like IMDSv2. Block these ranges at the network firewall level. If using public chatflows, restrict URL-fetching nodes or disable them entirely. Consider migrating away from Flowise as no official patch will be released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67620. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart