CVE-2026-10700

Langflow OSS versions 1.0.0–1.8.4 are affected by broken access control in the file handling API, allowing unauthorized access to user files via /api/v1/files/images/{flow_id}/{file_name} (no auth/authorization) and IDOR in /api/v1/files/download/{flow_id}/{file_name} (ownership not validated). I...

CVE-2026-13435

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-13435

The CVE-2026-13435 entry concerns IBM Langflow OSS versions 1.0.0–1.10.1, where an improper input validation in the PythonREPL sandbox allows code execution within a restricted globals environment. The root cause is a bypass of the sandbox validator, enabling access to sensitive values in the ser...

EUVD-2026-51244

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-13435 Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation...

CVE-2026-12942 Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-12942 Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

EUVD-2026-51243

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-12942

Langflow OSS (IBM) is affected by CVE-2026-12942 due to a path traversal flaw in unauthenticated API endpoints. Versions 1.0.0–1.10.1 allow remote attackers to access arbitrary files via crafted URL paths containing /../ sequences, potentially exposing credentials and sensitive data. The issue is...

CVE-2026-12945

IBM Langflow OSS 1.0.0–1.10.1 is affected by CVE-2026-12945: authenticated users can access and manipulate other users’ build jobs due to improper access control on log retrieval and unauthenticated build endpoints. Affected product: Langflow OSS (1.0.0–1.10.1). Root cause: authorization bypass t...

CVE-2026-12945 Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints...

CVE-2026-12940

Langflow OSS versions 1.0.0–1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP stdio launcher. The root cause is in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_ENV_VARS blocklist does not include SHELLOPTS, BASHOPTS, and PS4, enab...

CVE-2026-12940 Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

EUVD-2026-51240

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

CVE-2026-13442

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

CVE-2026-13442 Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

EUVD-2026-50066

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

CVE-2026-13442

Langflow OSS versions 1.0.0–1.10.1 are affected by CVE-2026-13442. An attacker could reuse another user’s FAISS namespace to access owner‑only vector content and influence later query results, enabling cross‑user information disclosure and limited integrity impact via persistent poisoning of resu...

Langflow AI - Unauthenticated Remote Code Execution

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. id: CVE-2025-3248 info: name: Langflow AI - Unauthenticated Remote Code Execution author: nvn172...