Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2026-2410 14 CVEs

IBM Langflow Desktop OSS: Mehrere Schwachstellen

Published Jul 19, 2026 · Updated Aug 4, 2026 · Revision 2 · de-DE

Vendor: IBM Product: Langflow Desktop Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop OSS ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

IBM Langflow Desktop ist eine lokale Anwendung zur Entwicklung und Ausführung von Langflow-basierten Anwendungen.

Vulnerabilities 14

  • Critical 9.8
    CVE-2026-9198 Exploited Public exploit Scanner template EPSS 29%

    Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

    IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

    IBM Langflow OSS
    KEV Aug 4, 2026
  • Critical 9.9
    CVE-2026-8476

    Disk Cache Deserialization Remote Code Execution Vulnerability

    IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation,…

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-8481

    Remote Code Execution via Code Validation Endpoint

    IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec()…

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-8635

    Arbitrary Code Execution in Python Interpreter Component

    IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-8859

    Path Traversal in APIRequest Component via Content-Disposition Header

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enab…

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-9135

    Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies component's ToolGuard integration that bypasses the allow_custom_components=false secu…

    IBM Langflow OSS
  • Critical 9.8
    CVE-2026-8505

    Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

    IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configurati…

    IBM Langflow OSS langflow PyPI
  • Critical 9.8
    CVE-2026-9103 Scanner template

    Unauthenticated Superuser Token Issuance via Auto-Login Endpoint

    IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication wh…

    IBM Langflow OSS
  • Critical 9.8
    CVE-2026-9202

    Unauthenticated User Registration Could Lead to Remote Code Execution

    IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts are immediately active and can authenticate …

    IBM Langflow OSS
  • High 8.8
    CVE-2026-7667

    Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing

    IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" ), enabling arbitrary f…

    IBM Langflow OSS
  • High 8.8
    CVE-2026-7755

    MCP Server Configuration Validator Bypass via File Upload API

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-8056

    Parameter Injection Vulnerability in API Graph Execution Engine

    IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filtering mechanism within the `apply_tweaks()` function.

    IBM Langflow OSS
  • High 7.7
    CVE-2026-7754

    SSRF Protection Configuration Vulnerability

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

    IBM Langflow OSS
  • High 7.5
    CVE-2026-7872

    Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass

    IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user.

    IBM Langflow OSS

Revision history

  1. #2

    Exploit CVE-2026-9198

  2. #1

    Initiale Fassung

References