925 matches found
CVE-2026-12940-Langflow-Unauth-RCE
CVE-2026-12940 — Langflow OSS ≤ 1.10.1 Unauthenticated RCE MCP stdio env-var injection Unauthenticated remote code execution in Langflow OSS through 1.10.1. The environment-variable blocklist that guards MCP stdio server configuration DANGEROUSENVVARS omits SHELLOPTS, BASHOPTS and PS4. Because th...
CVE-2026-9198
🚨 CVE-2026-9198 IBM Langflow OSS Unauthenticated RCE via Auto-Login Bypass 📋 Overview CVE-2026-9198 is a critical unauthenticated Remote Code Execution RCE vulnerability in IBM Langflow OSS. This exploit chains two vulnerabilities: CVE-2026-9103 : Auto-login bypass that grants superuser JWT token...
Langflow OSS - Superuser Token Issuance
Langflow OSS with default AUTOLOGIN exposes /api/v1/autologin, which returns a superuser access token to any unauthenticated request. id: CVE-2026-9103 info: name: Langflow OSS - Superuser Token Issuance author: str4k3r severity: critical description: | Langflow OSS with default AUTOLOGIN exposes...
Langflow OSS <=1.12.2 - Unauthenticated RCE via Import Code Execution
Langflow OSS 1.0.0 through 1.12.2 is vulnerable to unauthenticated remote code execution via the POST /api/v1/validate/code endpoint, which calls importlib.importmodule on user-supplied import statements, executing module top-level code instead of merely validating syntax. Combined with the defau...
EXPLOIT-CVE-2026-9198
CVE-2026-9198 — IBM Langflow OSS Unauthenticated RCE Proof-of-concept exploit and a self-contained Docker lab for CVE-2026-9198 , an unauthenticated remote code execution vulnerability in IBM Langflow OSS. The exploit chains two endpoints — autologin which hands out a SUPERUSER token to anyone an...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass Educational PoC This repository provides an educational proof of concept for CVE-2026-9198 affecting IBM Langflow OSS. The PoC poc.py demonstrates how an unauthenticated attacker can chain: 1. GET/POST /api/v1/autologin return...
CVE-2026-9198_exploit
CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...
CVE-2026-9198
CVE-2026-9198 Vulnerability cause: IBM Langflow OSS is an open-source software specifically used for building and deploying Agent automation workflows. IBM Langflow OSS from 1.0.0 to 1.10.0 has automatic login enabled by default autologin is true. In this mode, accessing the /api/v1/autologin...
CVE-2026-97677 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the content...
CVE-2026-97677
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a path traversal vulnerability (CWE-22 ) where an authenticated flow author can bypass local file access isolation safeguards. This allows the attacker to write controlled content into any directory writable by the service account a...
PT-2026-140149
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description An authenticated flow author can bypass local file access isolation safeguards to write controlled file content into any directory writable by the service account. Additionally, by usi...
Langflow: Auth Bypass
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...
Langflow 1.0.x < 1.13.0 Multiple Vulnerabilities
The version of Langflow installed on the remote host is 1.0.x prior to 1.13.0. It is, therefore, affected by multiple vulnerabilities: - IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. CVE-2026-93680 - IBM Langflo...
Security Bulletin: Langflow OSS is affected by multiple vulnerabilities
Summary Langflow OSS is affected by multiple vulnerabilities that could allow a remote attacker to bypass authentication controls, execute arbitrary code, expose application programming interface API credentials, or disclose information through vulnerable dependencies. Issues include an incomplet...
CVE-2026-93680
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...
CVE-2026-93680
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication...
CVE-2026-90991
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or throttling...
CVE-2026-90991
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or throttling...