2202 matches found
PT-2026-68296
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authorization bypass exists in the MemoryComponent that allows authenticated users to access the chat history of other users through session id collision. The retrieve messages and...
CVE-2026-10128: Exposure of Sensitive Information to an Unauthorized Actor
IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...
CVE-2026-17624: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...
CVE-2026-9081: Server-Side Request Forgery (SSRF)
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...
CVE-2026-7658: Improper Limitation of a Pathname to a Restricted Directory
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing ke...
CVE-2026-9130: Authorization Bypass Through User-Controlled Key
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
PT-2026-68289
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Incomplete and ineffective enforcement of protections allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended...
CVE-2026-17632: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...
CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations...
PT-2026-68253
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An issue allows users to read arbitrary files from the server filesystem by sending a crafted MCP resources/read request. By using a URL-encoded path traversal sequence in the filename...
PT-2026-68258
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Authenticated users can exploit a built-in component to read arbitrary server environment variables. This allows the exposure of sensitive secrets, bypassing security controls designed...
PT-2026-68297
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS affected versions not specified Description An issue exists involving weak cryptographic key derivation within the ensure fernet key function. Key derivation is the process of deriving one or more secret keys from a master key...
CVE-2026-8478: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...
PT-2026-68295
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description A Server-Side Request Forgery SSRF issue exists in the validate model provider key function for the Ollama provider. The function processes a user-supplied OLLAMA BASE URL parameter an...
CVE-2026-7646: Improper Limitation of a Pathname to a Restricted Directory
IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP resources/read request with a URL-encoded path...
PT-2026-68298
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Improper validation of module imports allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version tha...
IBM Langflow Code Injection Vulnerability
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...
VulnCheck KEV: CVE-2026-9198
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...
The vulnerability of the `get_flow_by_id_or_endpoint_name` function in the Langflow agent and workflow creation/execution tool allows a attacker to circumvent existing security restrictions.
The vulnerability of the getflowbyidorendpointname function in the Langflow agent and workflow creation/execution tools relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions using an...
