CVE-2026-67620 | FlowiseAI Flowise up to 3.1.4 SSRF Guard httpSecurity.ts server-side request forgery

A vulnerability has been found in FlowiseAI Flowise up to 3.1.4 and classified as problematic. This impacts an unknown function of the file httpSecurity.ts of the component SSRF Guard. This manipulation causes server-side request forgery. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is tracked as CVE-2026-67620. The attack is possible to be carried out remotely. No exploit exists.