PT-2026-39183 · Flowise · Flowise

Espanda666 · Published 2026-04-16 · Updated 2026-05-11 · CVE-2026-43995

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.0

Description Multiple tool implementations bypass the centralized HTTP security wrapper (httpSecurity.ts), which is designed to provide Server-Side Request Forgery (SSRF) protections through deny-list validation, IP resolution validation, IP pinning, and loopback blocking. Instead of using this secured wrapper, certain tools directly import and invoke raw HTTP clients such as node-fetch and axios. This architectural failure allows outbound requests to be executed without validation, enabling access to internal network resources and the potential theft of cloud metadata and credentials. The affected components include OpenAPIToolkit.ts, WebScraperTool.ts, MCP/core.ts, and Arxiv/core.ts.

Recommendations Update to version 3.1.0. As a temporary workaround, restrict access to the OpenAPIToolkit, WebScraperTool, MCP, and Arxiv tools to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-43995

GHSA-QQVM-66Q4-VF5C

Affected Products

Flowise

References · 5

• 🔥 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-qqvm-66q4-vf5c · Exploit
• https://osv.dev/vulnerability/GHSA-qqvm-66q4-vf5c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43995 · Security Note
• https://github.com/FlowiseAI/Flowise · Note
• https://twitter.com/CVEnew/status/2053932394257010857 · Twitter Post