CVE-2026-9201: Inadequate Encryption Strength

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

PT-2026-68258

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Authenticated users can exploit a built-in component to read arbitrary server environment variables. This allows the exposure of sensitive secrets, bypassing security controls designed...

PT-2026-68305

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authenticated attacker can execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode is enabled to restri...

CVE-2026-9196: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

CVE-2026-7657: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-8446: Missing Authentication for Critical Function

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...

PT-2026-68254

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authentication bypass exists in the Model Context Protocol MCP composer endpoint. This occurs when the mcp composer enabled variable is set to true the default setting and projects...

PT-2026-68296

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authorization bypass exists in the MemoryComponent that allows authenticated users to access the chat history of other users through session id collision. The retrieve messages and...

PT-2026-68289

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Incomplete and ineffective enforcement of protections allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended...

PT-2026-68295

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description A Server-Side Request Forgery SSRF issue exists in the validate model provider key function for the Ollama provider. The function processes a user-supplied OLLAMA BASE URL parameter an...

PT-2026-68303

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Remote attackers can execute arbitrary code on the server without authentication by sending two HTTP requests. Recommendations Update IBM Langflow OSS to a version later than 1.10.3...

CVE-2026-10128: Exposure of Sensitive Information to an Unauthorized Actor

IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...

PT-2026-68297

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS affected versions not specified Description An issue exists involving weak cryptographic key derivation within the ensure fernet key function. Key derivation is the process of deriving one or more secret keys from a master key...

CVE-2026-17630: Incomplete List of Disallowed Inputs

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-8478: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

PT-2026-68293

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description The software uses Python's non-cryptographic random module to generate Fernet encryption keys when user secrets are shorter than 32 characters. This process relies on the Mersenne...

PT-2026-68257

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the application fails to...

PT-2026-68294

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Improper control of user input code allows a remote attacker to inject and execute arbitrary code on the system. Recommendations Update IBM Langflow OSS to a version later than 1.10.3...

CVE-2026-9130: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...

CVE-2026-9205: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensurefernetkey function...