Skip to content
OpenAdvisories

Product · IBM

Langflow OSS

177 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • High 7.7
    CVE-2026-7754

    SSRF Protection Configuration Vulnerability

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-7755

    MCP Server Configuration Validator Bypass via File Upload API

    IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

    IBM Langflow OSS
  • High 7.5
    CVE-2026-7872

    Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass

    IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-8056

    Parameter Injection Vulnerability in API Graph Execution Engine

    IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filtering mechanism within the `apply_tweaks()` function.

    IBM Langflow OSS
  • High 8.5
    CVE-2026-10129

    SSRF via HTTP Redirect Following in Langflow API Request Component

    IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the…

    IBM Langflow OSS
  • High 7.1
    CVE-2026-10546

    DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component

    IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Time-of-Check/Time-of-Use (TOCTOU) race condition that can be exploited via DNS re…

    IBM Langflow OSS
  • High 8.2
    CVE-2026-10560

    Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS

    IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a valid job identifier, resulting in information …

    IBM Langflow OSS
  • High 8.2
    CVE-2026-10564

    SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

    IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in ve…

    IBM Langflow OSS
  • High 7.5
    CVE-2026-7787

    Unauthenticated Session History Access via Public Flow Execution

    IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.

    IBM Langflow OSS
  • High 7.1
    CVE-2026-7528

    Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS

    IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.

    IBM Langflow OSS