agentprime: ibm-langflow-desktopEvery new CVE for ibm-langflow-desktop.https://agentprime.io/CVE-2026-3341: IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Serviceshttps://agentprime.io/advisories/CVE-2026-3341/https://agentprime.io/advisories/CVE-2026-3341/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 14:47:57 GMTCVECVE-2026-6543: Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpointhttps://agentprime.io/advisories/CVE-2026-6543/https://agentprime.io/advisories/CVE-2026-6543/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 21:11:54 GMTCVECVE-2026-3345: Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpointhttps://agentprime.io/advisories/CVE-2026-3345/https://agentprime.io/advisories/CVE-2026-3345/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 21:11:20 GMTCVECVE-2026-3346: Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRawhttps://agentprime.io/advisories/CVE-2026-3346/https://agentprime.io/advisories/CVE-2026-3346/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 21:06:10 GMTCVECVE-2026-3340: Server-Side Request Forgery (SSRF) in Langflow URL Componenthttps://agentprime.io/advisories/CVE-2026-3340/https://agentprime.io/advisories/CVE-2026-3340/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 21:04:14 GMTCVECVE-2026-4502: Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 APIhttps://agentprime.io/advisories/CVE-2026-4502/https://agentprime.io/advisories/CVE-2026-4502/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 20:57:08 GMTCVECVE-2026-4503: Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpointhttps://agentprime.io/advisories/CVE-2026-4503/https://agentprime.io/advisories/CVE-2026-4503/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 20:48:17 GMTCVECVE-2026-3357: IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle filehttps://agentprime.io/advisories/CVE-2026-3357/https://agentprime.io/advisories/CVE-2026-3357/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 00:19:11 GMTCVE