Summary
Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop und OSS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
Product
IBM Langflow Desktop ist eine lokale Anwendung zur Entwicklung und Ausführung von Langflow-basierten Anwendungen.
Vulnerabilities 2
-
High 7.5
Unauthenticated Session History Access via Public Flow Execution
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.
-
Medium 5.4
IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other…
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin 7275444 vom 2026-06-11
https://www.ibm.com/support/pages/node/7275444
-
IBM Security Bulletin 7275453 vom 2026-06-11
https://www.ibm.com/support/pages/node/7275453