CVE-2025-59527

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.

• CWE-918

• https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/components/src/utils.ts#L474-L478Product
• https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/controllers/fetch-links/index.ts#L6-L24Product
• https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/services/fetch-links/index.ts#L8-L18Product
• https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.6Release Notes
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hr92-4q35-4j3mExploit, Vendor Advisory

Published

Sep 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59517Improper access control in Windows Storage VSP Driver allows…7.8
• CVE-2025-59518In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before …8
• CVE-2025-5952A vulnerability, which was classified as critical, has been …7.3
• CVE-2025-59524Horilla is a free and open source Human Resource Management …6.1
• CVE-2025-59525Horilla is a free and open source Human Resource Management …6.1
• CVE-2025-59526mailgen is a Node.js package that generates responsive HTML …2.7
• CVE-2025-59528Flowise is a drag & drop user interface to build a customize…10
• CVE-2025-59529Avahi is a system which facilitates service discovery on a l…5.5
• CVE-2025-5953The WP Human Resource Management plugin for WordPress is vul…8.8
• CVE-2025-59530quic-go is an implementation of the QUIC protocol in Go. In …7.5
• CVE-2025-59531Argo CD is a declarative, GitOps continuous delivery tool fo…7.5
• CVE-2025-59532Codex CLI is a coding agent from OpenAI that runs locally. I…8.6