Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Flowise
More for Flowise RSS feed for Flowise
- Severity
- High, CVSS 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Record
- CVE-2026-69250
- Affects
- Flowise
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 4, 2026
- Source last modified
- October 23, 2026
Description
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the OAuth2 token refresh endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is unauthenticated by design and performs a server-side HTTP request to the credential-controlled accessTokenUrl without SSRF protections. Runtime validation confirmed that the endpoint was reachable without authentication, triggered outbound POST requests to an attacker-controlled server, reflected the full remote response body to the caller through tokenInfo, and sent client_id, client_secret, grant_type=refresh_token, and refresh_token in the request body. This issue is fixed in version 3.1.3.
Description quoted from the NVD record.
Who is affected
Flowise is a tool for building apps that use AI language models, using a drag and drop screen. This flaw affects versions before 3.1.3. It is in the part of Flowise that refreshes saved sign-in credentials for connected services. Anyone can reach that part without logging in. An attacker can use it to make your Flowise server send a web request to an address stored in a credential, including a server the attacker controls, and see the full reply. The request carries the credential's secret values, such as its client secret and refresh token. This flaw is rated High.
What to do
- If someone in your organization installed or runs Flowise, that person should check which version is in use.
- If it is older than
3.1.3, they should update Flowise to version3.1.3or later, which fixes this flaw. - If an IT provider or vendor runs Flowise for your organization, send them this advisory and ask when the update to version
3.1.3will be done. - If you are not sure whether your organization uses Flowise or who looks after it, share this advisory with whoever manages your computers so they can check.
Analysis written from the source record as of October 23, 2026 and reviewed before publishing.