From 10edcc8cd5fa40ec211ae2f50c405c15369e0a24 Mon Sep 17 00:00:00 2001
From: Mendon Kissling <59585235+mendonk@users.noreply.github.com>
Date: Wed, 12 Nov 2025 17:57:33 -0500
Subject: [PATCH] docs: SSRF warning (#10573)

* add-ssrf-protection-env-var

* api-request-component

* Update docs/docs/Components/components-data.mdx

* Apply suggestions from code review

Co-authored-by: April I. Murphy <36110273+aimurphy@users.noreply.github.com>

* move-note-to-table

* release-note

---------

Co-authored-by: April I. Murphy <36110273+aimurphy@users.noreply.github.com>
---
 docs/docs/Components/components-data.mdx          |  4 ++--
 docs/docs/Develop/api-keys-and-authentication.mdx | 10 ++++++++++
 docs/docs/Support/release-notes.mdx               |  4 ++++
 3 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/docs/docs/Components/components-data.mdx b/docs/docs/Components/components-data.mdx
index 30537f809f..f40a1783e8 100644
--- a/docs/docs/Components/components-data.mdx
+++ b/docs/docs/Components/components-data.mdx
@@ -79,7 +79,7 @@ For provider-specific API components, see <Icon name="Blocks" aria-hidden="true"
 | body | Body | Input parameter. The body to send with POST, PATCH, and PUT requests as a dictionary. |
 | headers | Headers | Input parameter. The headers to send with the request as a dictionary. |
 | timeout | Timeout | Input parameter. The timeout to use for the request. |
-| follow_redirects | Follow Redirects | Input parameter. Whether to follow HTTP redirects. The default is enabled (`true`). If disabled (`false`), HTTP redirects aren't followed. |
+| follow_redirects | Follow Redirects | Input parameter. Whether to follow HTTP redirects. Starting in Langflow version 1.7, the **Follow Redirects** parameter is disabled (`false`) by default to prevent SSRF bypass attacks where a public URL redirects to internal resources. Only enable redirects if you trust the target server.  For more information, see [SSRF protection environment variables](/api-keys-and-authentication#ssrf-protection). |
 | save_to_file | Save to File | Input parameter. Whether to save the API response to a temporary file. Default: Disabled (`false`) |
 | include_httpx_metadata | Include HTTPx Metadata | Input parameter. Whether to include properties such as `headers`, `status_code`, `response_headers`, and `redirection_history` in the output. Default: Disabled (`false`) |
 
@@ -113,7 +113,7 @@ You can select these output types:
 
 * `message_output`: A [Message (text)](/data-types#message) output with Lorem Ipsum sample text.
 * `data_output`: A [Data (JSON)](/data-types#data) object containing a JSON structure with one sample record under `records` and a `summary` section.
-* `dataframe_output`: A [DataFrame (tabular)](/data-types#dataframe) with 50 mock records, including columns such as `customer_id`, `first_name`, and `last_name`. 
+* `dataframe_output`: A [DataFrame (tabular)](/data-types#dataframe) with 50 mock records, including columns such as `customer_id`, `first_name`, and `last_name`.
 
 ## Read File {#file}
 
diff --git a/docs/docs/Develop/api-keys-and-authentication.mdx b/docs/docs/Develop/api-keys-and-authentication.mdx
index 3558178f8c..0303132e3d 100644
--- a/docs/docs/Develop/api-keys-and-authentication.mdx
+++ b/docs/docs/Develop/api-keys-and-authentication.mdx
@@ -319,6 +319,16 @@ LANGFLOW_CORS_ALLOW_METHODS=GET,POST,PUT
 ```
 :::
 
+### SSRF protection {#ssrf-protection}
+
+The following environment variables configure Server-Side Request Forgery (SSRF) protection for the [**API Request** component](/components-data#api-request).
+SSRF protection prevents requests to internal or private network resources, such as private IP ranges, loopback addresses, and cloud metadata endpoints.
+
+| Variable | Format | Default | Description |
+|----------|--------|---------|-------------|
+| `LANGFLOW_SSRF_PROTECTION_ENABLED` | Boolean | `False` | Enable SSRF protection for the **API Request** component. When enabled, the component blocks requests to private IP addresses. When disabled, requests are not blocked. |
+| `LANGFLOW_SSRF_ALLOWED_HOSTS` | List[String] | Not set | A comma-separated list of allowed hosts, IP addresses, or CIDR ranges that can bypass SSRF protection checks. For example: `192.168.1.0/24,10.0.0.5,*.internal.company.local`.|
+
 ## Start a Langflow server with authentication enabled
 
 This section shows you how to use the [authentication environment variables](/api-keys-and-authentication#authentication-environment-variables) to deploy a Langflow server with authentication enabled.
diff --git a/docs/docs/Support/release-notes.mdx b/docs/docs/Support/release-notes.mdx
index ff17b1b08b..cc892a9069 100644
--- a/docs/docs/Support/release-notes.mdx
+++ b/docs/docs/Support/release-notes.mdx
@@ -58,6 +58,10 @@ For all changes, see the [Changelog](https://github.com/langflow-ai/langflow/rel
 
     Added the `LANGFLOW_WEBHOOK_AUTH_ENABLE` environment variable for authenticating requests to the [`/webhook` endpoint](/api-flows-run#webhook-run-flow). When `LANGFLOW_WEBHOOK_AUTH_ENABLE=TRUE`, webhook endpoints require API key authentication and validate that the authenticated user owns the flow being executed. When `FALSE`, no Langflow API key is required and all requests to the webhook endpoint are treated as being sent by the flow owner.
 
+- SSRF protection
+
+    Added SSRF (Server-Side Request Forgery) protection to the [**API Request** component](/components-data#api-request). HTTP redirects are disabled by default to prevent SSRF bypass attacks. To enable SSRF protection, set `LANGFLOW_SSRF_PROTECTION_ENABLED=TRUE`. Configure allowed hosts with `LANGFLOW_SSRF_ALLOWED_HOSTS`. Flows that relied on automatic redirects will need to enable it manually.
+
 - Changes to read/write file components
 
     The **Save File** component was renamed to **Write File**, and it can now save to S3 and Google Drive.