SSRF Vulnerability in Flowise Product by FlowiseAI

CVE-2026-91935

What is CVE-2026-91935?

The Flowise application before version 3.1.4 has a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated users, specifically those with permissions to create or update chatflows, to manipulate baseURL parameters in chat-model nodes. This inadequacy in validating these parameters enables attackers to redirect requests to arbitrary hosts, potentially leading to the exfiltration of sensitive API keys. By targeting cloud metadata services or internal hosts, malicious actors can exploit this flaw to acquire critical API keys from LLM providers, posing significant risks to the confidentiality and integrity of sensitive data.

References