Flowise version 3.0.5 contains a critical Server-Side Request Forgery vulnerability that enables unauthenticated attackers to probe internal network services.

The application is susceptible to a Server-Side Request Forgery (SSRF) via the /api/v1/fetch-links endpoint. This allows an unauthenticated attacker to force the server to initiate requests to arbitrary internal network locations.

Successful exploitation allows an adversary to bypass network perimeters and interact with internal services that are not exposed to the public internet. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk of internal reconnaissance, potentially exposing sensitive data or providing an entry point for further lateral movement within the corporate network.

Immediate Action: Upgrade the Flowise application to version 3.0.6 or later to incorporate the vendor-supplied security patch.

Proactive Monitoring: Review web access logs for unusual requests directed at the /api/v1/fetch-links endpoint, particularly those containing internal IP addresses or non-standard port numbers.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to the /api/v1/fetch-links endpoint and implement egress filtering on the server to prevent unauthorized outbound connections to internal network segments.

Public Exploit Available: No (the available data does not confirm a public exploit).

The presence of a proof-of-concept and the unauthenticated nature of this SSRF flaw necessitate an immediate update to version 3.0.6. Organizations should prioritize patching this vulnerability to prevent potential internal reconnaissance and unauthorized access to sensitive backend services.