192 matches found
EUVD-2026-78164
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-12944
IBM Langflow OSS 1.0.0 through 1.10.0 contains a vulnerability in its code security scanner where the DANGEROUS_IMPORTS blocklist correctly blocked subprocess but omitted the socket and urllib standard library modules. This allowed authenticated users to submit components containing socket.connec...
CVE-2026-12763
IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by improper cache key isolation in the MCP Tools component . The component caches discovered MCP tools in a shared process-local cache keyed only by the MCP server display name, without incorporating the user, session, flow, or resolved...
EUVD-2026-78087
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component...
CVE-2026-12765
IBM Langflow OSS versions 1.0.0 through 1.10.2 are vulnerable to server-side request forgery (SSRF) in several flow components, including LM Studio, Home Assistant, DeepSeek, xAI, Glean, HuggingFace Inference API, Ollama, LiteLLM, and Docling Serve. These components accept user-supplied URL value...
EUVD-2026-78086
IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
EUVD-2026-78084
IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
EUVD-2026-78083
IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow RCE no autenticado mediante bypass de auto-login PoC educativo Este repositorio proporciona una prueba de concepto educativa para CVE-2026-9198 que afecta a IBM Langflow OSS. El PoC poc.py demuestra cómo un atacante no autenticado puede encadenar: 1. GET/POST...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow OSS Ejecución Remota de Código RCE No Autenticada Vulnerabilidad crítica de ejecución remota de código no autenticada que afecta a IBM Langflow OSS. La vulnerabilidad es el resultado de encadenar dos debilidades: 1. /api/v1/autologin puede emitir un token de portador...
EXPLOIT-CVE-2026-9198
CVE-2026-9198 — IBM Langflow OSS RCE sin autenticación Prueba de concepto del exploit y un laboratorio Docker autónomo para CVE-2026-9198 , una vulnerabilidad de ejecución remota de código sin autenticación en IBM Langflow OSS. El exploit encadena dos endpoints — autologin que entrega un token...
CVE-2026-9198
...
CVE-2026-9198
🚨 CVE-2026-9198 IBM Langflow OSS RCE no autenticado mediante omisión de auto-login 📋 Resumen CVE-2026-9198 es una vulnerabilidad crítica de ejecución remota de código RCE no autenticada en IBM Langflow OSS. Este exploit encadena dos vulnerabilidades: CVE-2026-9103 : Omisión del auto-login que...
EUVD-2026-75761
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...
EUVD-2026-75777
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...
EUVD-2026-75771
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
EUVD-2026-75779
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs...
EUVD-2026-75780
IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...