# Flowise Execute Flow SSRF in base URL configuration

Source: https://junglewise.ai/threats/flowise-execute-flow-ssrf-in-base-url-configuration-fac4f0c1  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

Severity: low · CVSS 3.1 · Published 2026-06-23

Flowise is an open-source low-code workflow automation platform. A server-side request forgery (SSRF) vulnerability in the Execute Flow node allows authenticated attackers to bypass security checks and make HTTP requests to internal network addresses, cloud metadata services, or other restricted resources by manipulating the base URL field. This could enable attackers to discover internal services, access sensitive management interfaces, and leak confidential configuration or credentials.

Technologies: [flowise (npm)](https://junglewise.ai/threats/technologies/flowise). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Low severity, with a CVSS score of 3.1, published 23 June 2026.

**Which products and versions are affected?** flowise (npm) SEMVER:introduced=0,fixed=3.1.0.

**Is there a fix for This vulnerability?** Yes. flowise (npm): upgrade to 3.1.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a software library.

**Am I affected?** Check whether you run flowise (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- flowise (npm): upgrade to 3.1.0 or later

  ```sh
  npm install flowise@3.1.0
  ```


## Technical details

The Execute Flow node in Flowise before 3.1.0 contains a server-side request forgery (CWE-918) vulnerability in httpSecurity.ts. The vulnerable component fails to call the secureFetch verification function when processing intranet addresses provided through the base URL field, bypassing the checkDenyList and resolveAndValidate security checks. Exploitation requires authentication (API key or bearer token), network access to the Flowise API endpoint, and the ability to configure or trigger an Execute Flow node with a malicious base URL. A successful attack enables arbitrary HTTP requests from the server to internal networks, cloud metadata endpoints, or internal services for reconnaissance and lateral movement. The vulnerability was fixed in version 3.1.0.

## Affected products

- Flowise Flowise < 3.1.0

## Timeline

- 2026-06-23: disclosed: Original advisory published (GHSA-w4hm-rrxg-pxcf)
- 2026: patched: Fixed in version 3.1.0
- 2026-09-23: other: Advisory withdrawn as duplicate of GHSA-9hrv-gvrv-6gf2

## References

- [https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9hrv-gvrv-6gf2](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9hrv-gvrv-6gf2)

## Related threats

- [Duplicate Advisory: INVITED users auto-promoted via SSO email match (invite-token bypass)](https://junglewise.ai/threats/duplicate-advisory-invited-users-auto-promoted-via-sso-email-match-d290aa10)
- [Duplicate Advisory: Flowise contains an unauthenticated sandbox escape](https://junglewise.ai/threats/duplicate-advisory-flowise-contains-an-unauthenticated-sandbox-escape-8959e167)
- [Flowise incomplete credential redaction in API](https://junglewise.ai/threats/cve-2026-73604-flowise-incomplete-credential-redaction-in-api)
- [Flowise text-to-speech endpoint credential abuse via unauthenticated access](https://junglewise.ai/threats/cve-2026-73603-flowise-text-to-speech-endpoint-credential-abuse-via)
- [Flowise IDOR in payment source endpoint](https://junglewise.ai/threats/cve-2026-73488-flowise-idor-in-payment-source-endpoint)