Server-Side Request Forgery (SSRF) in Langflow - #VU156085

Vulnerability details

The vulnerability allows a remote user to access internal services and cloud metadata endpoints from the Langflow server, disclose sensitive information such as credentials or tokens, and interact with services on private networks.

The vulnerability exists due to missing or non-enforcing server-side request forgery protection in Langflow's API Request, RSS Reader, SearXNG, Web Search, Home Assistant, Glean Search, and Docling Serve components when processing user-controlled URLs. A remote user can build or run flows that direct these components to addresses such as http://169.254.169.254/latest/meta-data/ or http://10.0.0.1/ to reach internal services and, in many cases, retrieve their responses through component output.

Affected software

Remediation

External References

• https://github.com/langflow-ai/langflow/security/advisories/GHSA-j8f7-x8jm-wmm4

Related Security Bulletins

• Multiple vulnerabilities in Langflow