CVE-2026-7657 Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-7657

IBM Langflow OSS versions 1.0.0–1.10.3 are affected by server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. The CVSS vector indicates network access with low attack complexity, requiring low privileges and no user interaction, with a high confidentiali...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-70607

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-20268

creationtimestamp| type| source ---|---|--- 2026-08-05 17:29:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117044082167274064 2026-08-06 05:17:07+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260806 2026-08-06 13:10:12+00:00| seen|...

CVE-2026-20310

creationtimestamp| type| source ---|---|--- 2026-08-05 17:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o 2026-08-05 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo 2026-08-06 08:01:07+00:00| seen|...

CVE-2026-9195

creationtimestamp| type| source ---|---|--- 2026-08-05 17:20:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxqhflx2b 2026-08-06 16:15:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-9193

creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu72j3b23 2026-08-06 16:15:53+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781 2026-09-05 03:16:47+00:00| seen|...

EUVD-2026-53520

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...

CVE-2026-17630

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-9190

creationtimestamp| type| source ---|---|--- 2026-08-05 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzqmqsvx2l 2026-08-06 16:15:49+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-7557

creationtimestamp| type| source ---|---|--- 2026-08-05 17:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzn25ytt2h 2026-08-06 16:15:44+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-15587

creationtimestamp| type| source ---|---|--- 2026-08-05 17:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzjgf4672b...

CVE-2026-20200

creationtimestamp| type| source ---|---|--- 2026-08-05 17:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96776 2026-08-06 10:50:29+00:00| seen|...

CVE-2026-15573

creationtimestamp| type| source ---|---|--- 2026-08-05 16:59:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdytdptqw22 2026-08-05 23:02:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117045393405816451 2026-08-05 23:02:49+00:00| seen|...

CVE-2026-12410

creationtimestamp| type| source ---|---|--- 2026-08-05 16:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdypuyg4422...

EUVD-2026-53477

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-71201

creationtimestamp| type| source ---|---|--- 2026-08-05 16:32:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3r2rzs5rcn4ns...

CVE-2026-70604

creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...

EUVD-2026-53465

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...