2197 matches found
PT-2026-68255
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Remote authenticated attackers can bypass localhost-only restrictions to write arbitrary Model Context Protocol MCP server configurations to IDE configuration files on the host system...
CVE-2026-17625: Improper Neutralization of Special Elements used in an OS Command
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...
PT-2026-68227
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Improper validation of configuration parameters allows a remote attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.10.3...
PT-2026-68258
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Authenticated users can exploit a built-in component to read arbitrary server environment variables. This allows the exposure of sensitive secrets, bypassing security controls designed...
PT-2026-68296
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authorization bypass exists in the MemoryComponent that allows authenticated users to access the chat history of other users through session id collision. The retrieve messages and...
PT-2026-68225
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Remote authenticated attackers can execute arbitrary commands due to improper validation of the command field within MCP server configurations. Recommendations Update IBM Langflow OSS ...
CVE-2026-10128: Exposure of Sensitive Information to an Unauthorized Actor
IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...
CVE-2026-17624: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...
CVE-2026-9081: Server-Side Request Forgery (SSRF)
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...
CVE-2026-7658: Improper Limitation of a Pathname to a Restricted Directory
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing ke...
CVE-2026-9130: Authorization Bypass Through User-Controlled Key
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
PT-2026-68289
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Incomplete and ineffective enforcement of protections allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended...
CVE-2026-17632: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...
CVE-2026-8446: Missing Authentication for Critical Function
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...
CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations...
CVE-2026-17633: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection...
The vulnerability of the `get_flow_by_id_or_endpoint_name` function in the Langflow agent and workflow creation/execution tool allows a attacker to circumvent existing security restrictions.
The vulnerability of the getflowbyidorendpointname function in the Langflow agent and workflow creation/execution tools relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions using an...
VulnCheck KEV: CVE-2026-9198
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...
IBM Langflow Code Injection Vulnerability
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...
