CyberRota Analysis
AI-GeneratedFlowise versions prior to 3.1.4 are vulnerable due to inadequate validation of baseURL parameters in chat-model nodes, which allows authenticated users with specific permissions to redirect requests to arbitrary hosts. This vulnerability could lead to the exfiltration of sensitive LLM provider API keys by targeting cloud metadata services or internal systems. Organizations using Flowise should prioritize this issue to mitigate the risk of data breaches and unauthorized access to critical API keys.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata services or internal hosts.