CVE-2026-56275
HIGHFlowise - Server-Side Request Forgery via Execute Flow Base URL
Title source: cnaDescription
Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud metadata, and enumerate internal services by exploiting the missing secureFetch verification in httpSecurity.ts.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-9hrv-gvrv-6gf2)
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9hrv-gvrv-6gf2
Third Party Advisory third-party-advisory
VulnCheck Advisory: Flowise - Server-Side Request Forgery via Execute Flow Base URL
https://www.vulncheck.com/advisories/flowise-server-side-request-forgery-via-execute-flow-base-url
Scores
CVSS v3
7.1
EPSS
0.0021
EPSS Percentile
11.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-918
Status
published
Products (3)
Flowise/Flowise
< 3.1.0
Flowise/Flowise
3.1.0
flowiseai/flowise
< 3.1.0
Published
Jun 23, 2026
Tracked Since
Jun 23, 2026