{
 "id": "AIR-2026-1270",
 "slug": "cve-2026-67620-flowise-ssrf-vulnerability-in-metadata-guard",
 "title": "CVE-2026-67620: Flowise SSRF Vulnerability in Metadata Guard",
 "summary": "Flowise versions up to 3.1.4 contain an SSRF vulnerability where metadata endpoints are omitted from the default deny list. Authenticated attackers can force the server to issue arbitrary GET requests to cloud instance metadata services.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Flowise"
 ],
 "incident_date": "2026-08-08",
 "incident_date_precision": "day",
 "first_reported": "2026-08-08",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67620",
   "publisher": "NVD",
   "title": "CVE-2026-67620: Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts,…",
   "published_at": "2026-08-08"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-67620",
  "ssrf",
  "flowise"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}