CVE-2026-43995: Flowise tools bypass secured wrapper and invoke raw HTTP clients

Summary

CVE-2026-43995 affects Flowise, a drag and drop user interface for building customized large language model flows, prior to 3.1.0. Several tool implementations, including OpenAPIToolkit/OpenAPIToolkit.ts, WebScraperTool/WebScraperTool.ts, MCP/core.ts and Arxiv/core.ts, import and invoke raw HTTP clients (node-fetch, axios) instead of the secured wrapper. The weakness is classified as CWE-918, Server-Side Request Forgery. GitHub assigns a CVSS 4.0 base score of 5.3 (MEDIUM).

Mitigation

Fixed in 3.1.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12
• flowise-componentsnpmLLM dependency since 2023-04-10 · 1 tracked dependent

Related items

• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek