CVE-2026-90580
Received Received - Intake

Server-Side Request Forgery in FlowiseAI Flowise

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: VulDB

Description
A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.1.3 is able to resolve this issue. The patch is identified as 700137738bcaebefd4709021f6d6b0abcd7df0ac. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-14
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2026-90580
EUVD
EUVD-2026-77070

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
flowiseai flowise to 3.0.2 (inc)
flowiseai flowise 3.1.3
flowiseai flowise From 3.0.1 (inc) to 3.1.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in FlowiseAI Flowise versions up to 3.0.2. It affects the evaluations endpoint where the function axios.post uses unvalidated HTTP headers (Host/X-Forwarded-Proto) to construct URLs for outbound requests. An attacker can manipulate these headers to force the server to send requests to arbitrary internal or external hosts, potentially accessing sensitive data or services.

Detection Guidance

To detect this SSRF vulnerability, check if your FlowiseAI Flowise instance is running versions 3.0.1 through 3.1.2. Inspect network traffic for outbound requests from the evaluations endpoint that use unvalidated Host or X-Forwarded-Proto headers. Look for requests to internal services or cloud metadata endpoints. Use commands like curl to test the endpoint manually.

Impact Analysis

If you use FlowiseAI Flowise versions 3.0.1 to 3.1.2 with the evaluations feature enabled, an authenticated user with specific permissions could exploit this to send requests to internal services, cloud metadata endpoints, or other hosts. If the evaluated chatflow has an API key, it may be exposed to the attacker. The attacker could also read responses from internal services, potentially leading to data breaches or unauthorized access.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Exposure of API keys or internal service responses may result in non-compliance, potential fines, and reputational damage. Organizations using affected versions must upgrade to mitigate risks.

Mitigation Strategies

Immediately upgrade FlowiseAI Flowise to version 3.1.3 or later. If upgrading is not possible, disable the evaluations feature or restrict access to the evaluations endpoint. Ensure the APP_URL environment variable is properly configured to avoid dynamic URL construction.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90580. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart