Skip to content
OpenAdvisories
High WID-SEC-2026-2675 17 CVEs

IBM Langflow Desktop: Mehrere Schwachstellen

Published Aug 5, 2026 · Updated Aug 5, 2026 · de-DE

Vendor: IBM Product: Langflow Desktop Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.

Product

IBM Langflow Desktop ist eine lokale Anwendung zur Entwicklung und Ausführung von Langflow-basierten Anwendungen.

Vulnerabilities 17

  • High 8.8
    CVE-2026-17632

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-8182

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-8478

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-9201

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component …

    IBM Langflow OSS
  • High 8.5
    CVE-2026-17624

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper…

    IBM Langflow OSS
  • High 8.5
    CVE-2026-17633 Public exploit

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.

    IBM Langflow OSS
  • High 8.1
    CVE-2026-9196

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backen…

    IBM Langflow OSS
  • High 7.7
    CVE-2026-8183

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially cra…

    IBM Langflow OSS
  • High 7.4
    CVE-2026-8470

    Langflow is affected by weaknesses in secret handling and sensitive configuration access

    IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Tw…

    IBM Langflow OSS
  • High 7.4
    CVE-2026-9205

    Langflow is affected by weaknesses in secret handling and sensitive configuration access

    IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

    IBM Langflow OSS langflow PyPI
  • High 7.1
    CVE-2026-9081

    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

    IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider. The function accepts a user-supplied OLLAMA_BASE_URL parameter a…

    IBM Langflow OSS
  • High 7.1
    CVE-2026-9130

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message …

    IBM Langflow OSS
  • Medium 6.5
    CVE-2026-10128

    Langflow is affected by weaknesses in secret handling and sensitive configuration access

    IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components.

    IBM Langflow OSS
  • Medium 6.5
    CVE-2026-7657

    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

    IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement.

    IBM Langflow OSS
  • Medium 6.5
    CVE-2026-7658

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenan…

    IBM Langflow OSS
  • Medium 5.9
    CVE-2026-10547

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cro…

    IBM Langflow OSS
  • Medium 5.4
    CVE-2026-7869

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or con…

    IBM Langflow OSS

Revision history

  1. #1

    Initiale Fassung

References