CVE-2025-59527 | FlowiseAI Flowise 3.0.5 /api/v1/fetch-links server-side request forgery

September 22, 2025 Yanac

A vulnerability labeled as critical has been found in FlowiseAI Flowise 3.0.5. Affected is an unknown function of the file /api/v1/fetch-links. The manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2025-59527. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More