CVE-2026-9198

CVE-2026-9198 - IBM Langflow में अप्रमाणित RCE ऑटो-लॉगिन बाईपास के माध्यम से शैक्षिक PoC यह रिपॉजिटरी IBM Langflow OSS को प्रभावित करने वाले CVE-2026-9198 के लिए एक शैक्षिक प्रूफ ऑफ कॉन्सेप्ट प्रदान करता है। The PoC poc.py दर्शाता है कि कैसे एक अप्रमाणित हमलावर निम्नलिखित को जोड़ सकता है: 1...

CVE-2026-9198

CVE-2026-9198 Причина уязвимости: IBM Langflow OSS — это программное обеспечение с открытым исходным кодом, предназначенное для построения и развертывания автоматизированных рабочих процессов агентов. В IBM Langflow OSS 1.0.0–1.10.0 по умолчанию включён автоматический вход autologin = true. В это...

CVE-2026-9198_exploit

CVE-2026-9198 — Langflow OSS बिना प्रमाणीकरण के RCE डिफ़ॉल्ट तैनाती पर IBM Langflow OSS 1.0.0 – 1.10.0 में बिना प्रमाणीकरण के रिमोट कोड निष्पादन। यह दो कमज़ोरियों को जोड़ता है: CVE-2026-9103 — जब भी AUTOLOGIN सक्षम हो Langflow 1.5 में डिफ़ॉल्ट, GET /api/v1/autologin बिना किसी क्रेडेंशियल के किसी ...

Security Bulletin: Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

Summary Langflow OSS includes outbound network request functionality for provider validation and API request execution. Weaknesses in request destination validation and enforcement could allow authenticated users to induce requests to unintended internal or external network locations, which may...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — تنفيذ أوامر عن بُعد غير مصادَق عليه في Langflow OSS حتى 1.10.1 حقن متغيرات البيئة في MCP stdio تنفيذ أوامر عن بُعد غير مصادَق عليه في Langflow OSS حتى الإصدار 1.10.1. قائمة حظر متغيرات البيئة التي تحمي إعداد خادم MCP stdio DANGEROUSENVVARS تهمل SHELLOPTS وBASHOPTS وPS4. ولأن...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS - RCE non authentifiée via contournement de l'auto-connexion 📋 Aperçu CVE-2026-9198 est une vulnérabilité critique d'exécution de code à distance RCE non authentifiée dans IBM Langflow OSS. Cet exploit combine deux vulnérabilités : CVE-2026-9103 : Contournement de...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow OSS تنفيذ أوامر عن بُعد غير مُصادَق عليه RCE ثغرة حرجة لتنفيذ الأوامر عن بُعد دون مصادقة، تؤثر على IBM Langflow OSS. تنشأ الثغرة من الجمع بين نقطتي ضعف: 1. يمكن لـ /api/v1/autologin إصدار رمز حامل bearer token مميَّز من نوع SUPERUSER لمستدعٍ عبر الشبكة غير مُصادَق علي...

Security Bulletin: Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

Summary A vulnerability allowed unauthenticated attackers to achieve remote code execution on default-configured instances. The vulnerability combined two distinct issues: an unauthenticated endpoint that issued superuser bearer tokens to any network caller, and a code validation endpoint that...

Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint

Summary A code injection vulnerability was identified in the code validation endpoint that allowed authenticated users to execute arbitrary code on the server. The vulnerability existed in the validation logic which compiled and executed function definitions to check for import errors. Attackers...

Security Bulletin: Insufficient Authentication Brute Force Protection on Login Endpoint

Summary A rate limiting capability exists within the product to restrict the number of authentication attempts permitted per IP address per minute against the login endpoint POST /api/v1/login. This control is configurable via the LANGFLOWRATELIMITENABLED environment variable, which defaults to...

EUVD-2026-53577

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection...

CVE-2026-7658 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing ke...

CVE-2026-10547

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/flowid/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized...

CVE-2026-7869 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...

CVE-2026-9081 Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

CVE-2026-9081

IBM Langflow OSS (versions 1.0.0–1.10.3) is affected by an SSRF in the Ollama provider due to validate_model_provider_key() accepting a user-supplied OLLAMA_BASE_URL and passing it directly to requests.get() without validating scheme/host allowlisting or private IP filtering. This can allow an at...

CVE-2026-17630

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-17623

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations...

CVE-2026-17623

Langflow OSS 1.0.0–1.10.3 is affected by CVE-2026-17623: a remote authenticated attacker can execute arbitrary commands due to improper validation of the command field in MCP server configurations. Affected product is Langflow OSS (versions 1.0.0–1.10.3). The root cause is inadequate validation o...