High · 7.5 CVE-2026-81265 EUVD-2026-75778GHSA-j99h-p584-x29h

Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

Published Sep 10, 2026 · Updated Sep 11, 2026 · Assigned by ibm

Description

IBM Langflow OSS 1.0.0 through 1.11.5.

Vendor	Product	Affected	Fixed
IBM	Langflow OSS	1.0.0 – ≤ 1.11.5	—

CNA	v3.1	7.5
EUVD	v3.1	7.5