# IBM Langflow OSS.

Every CVE that names IBM Langflow OSS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components](https://agentprime.io/advisories/CVE-2026-12765.md)
  `CVE-2026-12765` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components](https://agentprime.io/advisories/CVE-2026-12766.md)
  `CVE-2026-12766` · CVE record: IBM Langflow OSS · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-12767.md)
  `CVE-2026-12767` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is affected by improper authentication due to missing password verification in the password reset endpoint](https://agentprime.io/advisories/CVE-2026-17628.md)
  `CVE-2026-17628` · CVE record: IBM Langflow OSS · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-76059.md)
  `CVE-2026-76059` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-693
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-78569.md)
  `CVE-2026-78569` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-78571.md)
  `CVE-2026-78571` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-78575.md)
  `CVE-2026-78575` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-79723.md)
  `CVE-2026-79723` · CVE record: IBM Langflow OSS · CVSS 5.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-79724.md)
  `CVE-2026-79724` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Command injection
- [Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation](https://agentprime.io/advisories/CVE-2026-79725.md)
  `CVE-2026-79725` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-79742.md)
  `CVE-2026-79742` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-81204.md)
  `CVE-2026-81204` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-81211.md)
  `CVE-2026-81211` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-81941.md)
  `CVE-2026-81941` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-81213.md)
  `CVE-2026-81213` · CVE record: IBM Langflow OSS · CVSS 8.6 High · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches](https://agentprime.io/advisories/CVE-2026-81265.md)
  `CVE-2026-81265` · CVE record: IBM Langflow OSS · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to authentication bypass and insufficient session expiration](https://agentprime.io/advisories/CVE-2026-81268.md)
  `CVE-2026-81268` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-81940.md)
  `CVE-2026-81940` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection
- [A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem](https://agentprime.io/advisories/CVE-2026-84889.md)
  `CVE-2026-84889` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-85025.md)
  `CVE-2026-85025` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation](https://agentprime.io/advisories/CVE-2026-9225.md)
  `CVE-2026-9225` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components](https://agentprime.io/advisories/CVE-2026-14470.md)
  `CVE-2026-14470` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint](https://agentprime.io/advisories/CVE-2026-17627.md)
  `CVE-2026-17627` · CVE record: IBM Langflow OSS · CVSS 4.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control
- [Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components](https://agentprime.io/advisories/CVE-2026-17621.md)
  `CVE-2026-17621` · CVE record: IBM Langflow OSS · CVSS 5.4 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components](https://agentprime.io/advisories/CVE-2026-17622.md)
  `CVE-2026-17622` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components](https://agentprime.io/advisories/CVE-2026-17631.md)
  `CVE-2026-17631` · CVE record: IBM Langflow OSS · CVSS 5.0 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint](https://agentprime.io/advisories/CVE-2026-19298.md)
  `CVE-2026-19298` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Code injection
- [Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components](https://agentprime.io/advisories/CVE-2026-19301.md)
  `CVE-2026-19301` · CVE record: IBM Langflow OSS · CVSS 5.0 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components](https://agentprime.io/advisories/CVE-2026-19303.md)
  `CVE-2026-19303` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows](https://agentprime.io/advisories/CVE-2026-19300.md)
  `CVE-2026-19300` · CVE record: IBM Langflow OSS · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Information disclosure
- [Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components](https://agentprime.io/advisories/CVE-2026-19299.md)
  `CVE-2026-19299` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components](https://agentprime.io/advisories/CVE-2026-19302.md)
  `CVE-2026-19302` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components](https://agentprime.io/advisories/CVE-2026-19304.md)
  `CVE-2026-19304` · CVE record: IBM Langflow OSS · CVSS 7.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components](https://agentprime.io/advisories/CVE-2026-19305.md)
  `CVE-2026-19305` · CVE record: IBM Langflow OSS · CVSS 8.6 High · Not analysed yet · Published 4 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components](https://agentprime.io/advisories/CVE-2026-19306.md)
  `CVE-2026-19306` · CVE record: IBM Langflow OSS · CVSS 7.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components](https://agentprime.io/advisories/CVE-2026-9138.md)
  `CVE-2026-9138` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal
- [Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust](https://agentprime.io/advisories/CVE-2026-8447.md)
  `CVE-2026-8447` · CVE record: IBM Langflow OSS · CVSS 6.1 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust](https://agentprime.io/advisories/CVE-2026-9186.md)
  `CVE-2026-9186` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control
- [Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement](https://agentprime.io/advisories/CVE-2026-19295.md)
  `CVE-2026-19295` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities](https://agentprime.io/advisories/CVE-2026-19294.md)
  `CVE-2026-19294` · CVE record: IBM Langflow OSS · CVSS 6.4 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement](https://agentprime.io/advisories/CVE-2026-19286.md)
  `CVE-2026-19286` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities](https://agentprime.io/advisories/CVE-2026-18904.md)
  `CVE-2026-18904` · CVE record: IBM Langflow OSS · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities](https://agentprime.io/advisories/CVE-2026-18899.md)
  `CVE-2026-18899` · CVE record: IBM Langflow OSS · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Path traversal
- [Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities](https://agentprime.io/advisories/CVE-2026-18891.md)
  `CVE-2026-18891` · CVE record: IBM Langflow OSS · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement](https://agentprime.io/advisories/CVE-2026-18729.md)
  `CVE-2026-18729` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities](https://agentprime.io/advisories/CVE-2026-18545.md)
  `CVE-2026-18545` · CVE record: IBM Langflow OSS · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow](https://agentprime.io/advisories/CVE-2026-19875.md)
  `CVE-2026-19875` · CVE record: IBM Langflow OSS · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Authentication bypass
- [Insufficient Authentication Brute Force Protection on Login Endpoint](https://agentprime.io/advisories/CVE-2026-19297.md)
  `CVE-2026-19297` · CVE record: IBM Langflow OSS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Authentication bypass
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17624.md)
  `CVE-2026-17624` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17633.md)
  `CVE-2026-17633` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17632.md)
  `CVE-2026-17632` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-9196.md)
  `CVE-2026-9196` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-8182.md)
  `CVE-2026-8182` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-9201.md)
  `CVE-2026-9201` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-8478.md)
  `CVE-2026-8478` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement](https://agentprime.io/advisories/CVE-2026-8183.md)
  `CVE-2026-8183` · CVE record: IBM Langflow OSS · CVSS 7.7 High · Not analysed yet · Published 5 Aug 2026 · Tags: Path traversal
- [Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement](https://agentprime.io/advisories/CVE-2026-7658.md)
  `CVE-2026-7658` · CVE record: IBM Langflow OSS · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Path traversal
- [Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement](https://agentprime.io/advisories/CVE-2026-9130.md)
  `CVE-2026-9130` · CVE record: IBM Langflow OSS · CVSS 7.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control
- [Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement](https://agentprime.io/advisories/CVE-2026-10547.md)
  `CVE-2026-10547` · CVE record: IBM Langflow OSS · CVSS 5.9 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/ibm-langflow-oss.md>
Older: <https://agentprime.io/advisories/technology/ibm-langflow-oss.md?cursor=WyIyMDI2LTA4LTA1VDE4OjE0OjI5LjU0NDAwMFoiLCJDVkUtMjAyNi0xMDU0NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-langflow-oss&cursor=WyIyMDI2LTA5LTE0VDIwOjMyOjM1LjIzMjAwMFoiLCJDVkUtMjAyNi0xMjc2MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-langflow-oss/?cursor=WyIyMDI2LTA5LTE0VDIwOjMyOjM1LjIzMjAwMFoiLCJDVkUtMjAyNi0xMjc2MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.