1202678 matches found
CVE-2026-103092
IBM Langflow OSS versions 1.0.0 through 1.12.3 are affected by CVE-2026-103092 , which allows a remote authenticated attacker to execute arbitrary SQL commands due to improper access control (CWE-284). This vulnerability carries a CVSS base score of 8.5. To remediate this issue, IBM strongly reco...
EUVD-2026-113153
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...
CVE-2026-101288 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...
CVE-2026-101288
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Code Injection vulnerability (CVE-2026-101288 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in code. This flaw has a CVSS base score of 8.8 , indicating h...
EUVD-2026-113152
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...
CVE-2026-104309 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-104309
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Path Traversal vulnerability (CVE-2026-104309 ). This flaw occurs due to the improper limitation of a pathname to a restricted directory , which could allow a remote authenticated attacker to obtain sensitive information . The imp...
CVE-2026-104310
Langflow OSS versions 1.0.0 through 1.12.3 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-104310). This flaw could allow a remote authenticated attacker to obtain sensitive information by forcing the server to make unintended requests. IBM identifies this as a medium...
EUVD-2026-113149
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery SSRF vulnerability...
CVE-2026-104317
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Remote Code Execution (RCE) flaw. A remote attacker who can reach the message broker can execute arbitrary code on the system by exploiting the deserialization of untrusted data . No specific remediation steps or exploit links are...
CVE-2026-104317 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data...
EUVD-2026-113144
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data...
EUVD-2026-113143
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data...
CVE-2026-104324 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data...
CVE-2026-104328
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to arbitrary code execution due to the improper neutralization of special elements used in an OS command (CWE-94). This flaw allows a remote authenticated attacker to execute commands on the system. The impact includes high severity ac...
EUVD-2026-113141
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104328 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
