CVE-2026-41272: Flowise SSRF protection bypass via DNS rebinding and default configuration

Summary

CVE-2026-41272 affects Flowise, a drag and drop user interface for building customized large language model flows, prior to 3.1.0. The core security wrappers secureAxiosRequest and secureFetch, meant to prevent Server-Side Request Forgery (SSRF), contain multiple logic flaws that let attackers bypass the allow and deny lists through DNS Rebinding (Time-of-Check Time-of-Use) or through the default configuration, which enforces no deny list. The weakness is classified as CWE-918.

Mitigation

Fixed in 3.1.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• flowisenpmLLM dependency since 2024-03-12
• flowise-componentsnpmLLM dependency since 2023-04-10 · 1 tracked dependent

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• InfoSuppression Is Not Erasure: Mechanistic Analysis and Reactivation Boundaries of Subspace Projection for LoRA Backdoor DefenseSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• InfoSay Shibboleth: Fingerprinting the LLMs and Harnesses Behind Agentic AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)