CVE-2026-31829

Deeper analysis

CVE-2026-31829 is a Server-Side Request Forgery (SSRF) vulnerability, classified under CWE-918, affecting Flowise versions prior to 3.0.13. Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. The issue stems from an HTTP Node exposed in AgentFlow and Chatflow components, which performs server-side HTTP requests to user-controlled URLs without restrictions on target hosts. This includes private/internal IP ranges (RFC 1918), localhost, and cloud metadata endpoints, enabling attackers to trick the server into accessing resources not reachable from the public internet. The vulnerability carries a CVSS v3.1 base score of 7.1 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L).

Any user interacting with a publicly exposed chatflow can exploit this vulnerability by supplying malicious URLs, requiring low privileges (PR:L) but high attack complexity (AC:H) with no user interaction needed beyond normal usage. Successful exploitation allows attackers to force the Flowise server to make unauthorized requests to internal network resources, potentially leading to high confidentiality and integrity impacts (C:H/I:H) such as data exfiltration from internal services, along with low availability impact (A:L).

The official advisory on GitHub (GHSA-fvcw-9w9r-pxc7) confirms the vulnerability is fixed in Flowise version 3.0.13, recommending immediate upgrades to mitigate the SSRF risk. No additional workarounds are specified in the provided details.

Flowise's focus on LLM flows introduces AI/ML relevance, as exploited instances could compromise internal data used in model training or inference pipelines. No real-world exploitation has been reported in the available information.