Skip to content
OpenAdvisories
High WID-SEC-2026-2366 10 CVEs

IBM Langflow Desktop: Mehrere Schwachstellen

Published Jul 14, 2026 · Updated Jul 30, 2026 · Revision 4 · de-DE

Vendor: IBM Product: Langflow Desktop Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

IBM Langflow Desktop ist eine lokale Anwendung zur Entwicklung und Ausführung von Langflow-basierten Anwendungen.

Vulnerabilities 10

  • Critical 9.9
    CVE-2026-13435

    Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

    IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation.

    IBM Langflow OSS
  • Critical 9.8
    CVE-2026-12940 Public exploit

    Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGER…

    IBM Langflow OSS
  • Critical 9.8
    CVE-2026-13446

    Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-14499

    Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component.

    IBM Langflow OSS
  • High 8.1
    CVE-2026-13444

    Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their wor…

    IBM Langflow OSS
  • High 8.1
    CVE-2026-13445

    Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. In append mode, the attacker's wo…

    IBM Langflow OSS
  • High 8.1
    CVE-2026-13448

    Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validat…

    IBM Langflow OSS
  • High 7.5
    CVE-2026-12942

    Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

    IBM Langflow OSS
  • High 7.1
    CVE-2026-12945

    Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

    IBM Langflow OSS
  • High 7.1
    CVE-2026-13442

    Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints

    IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persi…

    IBM Langflow OSS

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-51244, EUVD-2026-51243, EUVD-2026-51242, EUVD-2026-51240, EUVD-2026-51272

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-50066

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-45308, EUVD-2026-45306, EUVD-2026-45330, EUVD-2026-45331

  4. #1

    Initiale Fassung

References