Total
210 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-12945 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 7.1 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints. | |||||
| CVE-2026-17623 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations. | |||||
| CVE-2026-17630 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 7.2 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters. | |||||
| CVE-2026-17633 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 8.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection. | |||||
| CVE-2026-17632 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning. | |||||
| CVE-2026-7657 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 6.5 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. | |||||
| CVE-2026-17626 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments. | |||||
| CVE-2026-17624 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 8.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports. | |||||
| CVE-2026-10547 | 1 Langflow | 1 Langflow | 2026-10-23 | N/A | 5.9 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized workflow execution, or denial of service. | |||||
| CVE-2025-34291 | 1 Langflow | 1 Langflow | 2026-10-15 | N/A | 8.8 HIGH |
| Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise. | |||||
| CVE-2025-68478 | 1 Langflow | 1 Langflow | 2026-10-13 | N/A | 7.1 HIGH |
| Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue. | |||||
| CVE-2025-68477 | 1 Langflow | 1 Langflow | 2026-10-13 | N/A | 7.7 HIGH |
| Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block private IP ranges (127[.]0[.]0[.]1, the 10/172/192 ranges) or cloud metadata endpoints (169[.]254[.]169[.]254), and it returns the response body as the result. Because the flow execution endpoints (/api/v1/run, /api/v1/run/advanced) can be invoked with just an API key, if an attacker can control the API Request URL in a flow, non-blind SSRF is possible—accessing internal resources from the server’s network context. This enables requests to, and collection of responses from, internal administrative endpoints, metadata services, and internal databases/services, leading to information disclosure and providing a foothold for further attacks. Version 1.7.0 contains a patch for this issue. | |||||
| CVE-2026-104335 | 1 Langflow | 1 Langflow | 2026-10-09 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control. | |||||
| CVE-2026-93678 | 1 Langflow | 1 Langflow | 2026-10-09 | N/A | 7.6 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. | |||||
| CVE-2026-93448 | 1 Langflow | 1 Langflow | 2026-10-09 | N/A | 6.5 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | |||||
| CVE-2026-101329 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 6.5 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control. | |||||
| CVE-2026-93674 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 9.8 CRITICAL |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-93443 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 7.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code. | |||||
| CVE-2026-104334 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 9.8 CRITICAL |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |||||
| CVE-2026-93675 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion. | |||||