CVE-2026-8183

Langflow OSS is affected (versions 1.0.0–1.10.3) by a vulnerability described as remote directory traversal via crafted URLs containing dot-dot sequences ( /.. / ), enabling access to arbitrary files on the system. The Connected CVE entry corroborates the affected versions and the traversal vecto...

CVE-2026-8183

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot "...

CVE-2026-7657

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-9130

CVE-2026-9130 affects IBM Langflow OSS versions 1.0.0–1.10.3. The root cause is an authorization bypass in the MemoryComponent where session_id is used to filter messages without validating flow_id or user_id ownership, enabling cross‑user information disclosure. This impacts multi‑user deploymen...

CVE-2026-9130 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...

CVE-2026-9205

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensurefernetkey function...

CVE-2026-8446

creationtimestamp| type| source ---|---|--- 2026-08-05 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4aow6hz2l...

CVE-2026-20301

creationtimestamp| type| source ---|---|--- 2026-08-05 17:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/heldjrm7aaluv 2026-08-06 05:17:20+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260806 2026-08-06 08:01:13+00:00| seen|...

CVE-2026-71190

creationtimestamp| type| source ---|---|--- 2026-08-05 17:40:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f3qqd57e5e2xb...

CVE-2026-71192

creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...

CVE-2026-7657

IBM Langflow OSS versions 1.0.0–1.10.3 are affected by server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. The CVSS vector indicates network access with low attack complexity, requiring low privileges and no user interaction, with a high confidentiali...

CVE-2026-70607

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

GHSA-V93F-FGJR-HJRJ

creationtimestamp| type| source ---|---|--- 2026-08-05 17:33:01+00:00| seen| https://gist.github.com/alon710/9a7a5a858022e3c656feab4ec8f0d30d...

CVE-2026-20268

creationtimestamp| type| source ---|---|--- 2026-08-05 17:29:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117044082167274064 2026-08-06 05:17:07+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260806 2026-08-06 13:10:12+00:00| seen|...

CVE-2026-20310

creationtimestamp| type| source ---|---|--- 2026-08-05 17:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o 2026-08-05 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo 2026-08-06 08:01:07+00:00| seen|...

CVE-2026-9195

creationtimestamp| type| source ---|---|--- 2026-08-05 17:20:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxqhflx2b 2026-08-06 16:15:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-9193

creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu72j3b23 2026-08-06 16:15:53+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

EUVD-2026-53520

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...

CVE-2026-17630

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters...

CVE-2026-9190

creationtimestamp| type| source ---|---|--- 2026-08-05 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzqmqsvx2l 2026-08-06 16:15:49+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...