CVE-2026-67620

Flowise through 3.1.4 contains a server-side request forgery flaw (CWE-918) in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200. An authenticated attacker triggers the flaw by calling the fetch-links API endpoint with a crafted URL parameter, bypassing deny-list validation including redirect-based bypasses; unauthenticated exploitation is also possible when URL-fetching nodes exist in public chatflows. The attacker forces the server to issue arbitrary GET requests to cloud instance metadata services, exposing instance identity data and role credentials on OCI or Alibaba Cloud deployments. Any Flowise deployment up to and including 3.1.4 is affected, with practical impact concentrated on instances running on Oracle Cloud Infrastructure or Alibaba Cloud. No in-the-wild exploitation is currently known (EPSS 0.3%, not in CISA KEV), but a public proof-of-concept is available.

What to do: Upgrade Flowise to a release newer than 3.1.4; as interim mitigation, restrict access to the fetch-links endpoint, require authentication on chatflows containing URL-fetching nodes, and block egress to 192.0.0.192 and 100.100.100.200 at the network level. Operators of OCI or Alibaba Cloud instances should review attached instance roles and rotate any role credentials that may have been exposed.