CVE-2026-9081

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

CVE-2026-9081 Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

CVE-2026-9081

IBM Langflow OSS (versions 1.0.0–1.10.3) is affected by an SSRF in the Ollama provider due to validate_model_provider_key() accepting a user-supplied OLLAMA_BASE_URL and passing it directly to requests.get() without validating scheme/host allowlisting or private IP filtering. This can allow an at...