What is the CVSS score of CVE-2026-31829?

CVE-2026-31829 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-31829?

Flowise versions prior to 3.0.13 contain a critical server-side request forgery (SSRF) vulnerability that allows attackers to exploit unpatched instances to perform unauthorized HTTP requests from…. A patch is available.

Is there a public PoC exploit available for CVE-2026-31829?

Yes, a public proof-of-concept exploit is available for CVE-2026-31829. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-31829?

Within 24 hours: Identify all Flowise instances in production and document their version numbers and network exposure; isolate any publicly accessible instances or restrict access to trusted networks only. Within 7 days: Implement network segmentation to limit Flowise outbound HTTP/HTTPS traffic to approved destinations only; apply WAF rules to block suspicious HTTP Node activity. Within 30 days: Upgrade to Flowise 3.0.13 or later when patch availability is confirmed; conduct a security audit of all Flowise deployments and review access logs for exploitation attempts.

AI / ML CVE-2026-31829

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-10 security-advisories@github.com

GHSA-fvcw-9w9r-pxc7

SSRF AI / ML Flowise

7.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.1 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 11, 2026 - 14:24 vuln.today

Public exploit code

CVE Published

Mar 10, 2026 - 22:16 nvd

HIGH 7.1

DescriptionGitHub Advisory

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.0.13, Flowise exposes an HTTP Node in AgentFlow and Chatflow that performs server-side HTTP requests using user-controlled URLs. By default, there are no restrictions on target hosts, including private/internal IP ranges (RFC 1918), localhost, or cloud metadata endpoints. This enables Server-Side Request Forgery (SSRF), allowing any user interacting with a publicly exposed chatflow to force the Flowise server to make requests to internal network resources that are inaccessible from the public internet. This vulnerability is fixed in 3.0.13.

AnalysisAI

Flowise versions prior to 3.0.13 allow unauthenticated users to trigger Server-Side Request Forgery (SSRF) attacks through improperly validated URLs in the HTTP Node component, enabling attackers to probe internal networks and cloud metadata endpoints from the Flowise server. Public exploit code exists for this vulnerability, and no patch is currently available for affected deployments. Any organization running a publicly exposed Flowise instance is at immediate risk of internal network reconnaissance and potential credential theft from cloud environments.

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Affects Flowise. Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.0.13, Flowise exposes an HTTP Node in AgentFlow and Chatflow that performs server-side HTTP requests using user-controlled URLs. By default, there are no restrictions on target hosts, including private/internal IP ranges (RFC 1918), localhost, or cloud metadata endpoints. This enables Server-Side Request Forgery (SSRF), allowing any user interacting with a publicly exposed chatflow to force the Fl