Metadata Theft

Flowise SSRF Vulnerability Bypasses Network Guardrails to Steal Cloud Instance Credentials

Vulnerability CVE-2026-67620 in Flowise AI workflow builder allows attackers to bypass SSRF deny-lists and extract cloud instance metadata credentials from OCI and Alibaba Cloud.