CVE-2026-127214 | FlowiseAI Flowise up to 3.1.4 Custom Function axios.cjs server-side request forgery

A vulnerability described as critical has been identified in FlowiseAI Flowise up to 3.1.4. Impacted is an unknown function of the file axios/dist/node/axios.cjs of the component Custom Function. Such manipulation leads to server-side request forgery. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2026-127214. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More