Advisories · Technology

IBM Langflow OSS.

Every CVE that names IBM Langflow OSS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18894 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-77817 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Information disclosure
Not analysed yet 29 Oct 2026
CVE-2026-77819 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-90991 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Denial of service
Not analysed yet 29 Oct 2026
CVE-2026-93680 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 29 Oct 2026
CVE-2026-102590 CVE record

CVSS 5.0 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 29 Oct 2026
CVE-2026-103092 CVE record

CVSS 8.5 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-101288 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-104308 CVE record

CVSS 4.3 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Command injection
Not analysed yet 29 Oct 2026
CVE-2026-104309 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-104310 CVE record

CVSS 4.3 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 29 Oct 2026
CVE-2026-104312 CVE record

CVSS 3.5 Low

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-104314 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Hard-coded credentials
Not analysed yet 29 Oct 2026
CVE-2026-104315 CVE record

CVSS 4.3 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 29 Oct 2026
CVE-2026-104316 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-104317 CVE record

CVSS 8.1 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-104324 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-104328 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-104331 CVE record

CVSS 5.4 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 29 Oct 2026
CVE-2026-104339 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-107326 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Command injection
Not analysed yet 29 Oct 2026
CVE-2026-107327 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-107328 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-107329 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-110186 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-110190 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-110192 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Hard-coded credentials
Not analysed yet 29 Oct 2026
CVE-2026-110193 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-110196 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-110200 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Information disclosure
Not analysed yet 29 Oct 2026
CVE-2026-110244 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-110245 CVE record

CVSS 7.5 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 29 Oct 2026
CVE-2026-110309 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-107366 CVE record

CVSS 8.3 High

Langflow OSS Authorization Bypass Through User-Controlled Key
- IBM Langflow OSS
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2026-88962 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-93443 CVE record

CVSS 7.5 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-93448 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 7 Oct 2026
CVE-2026-93449 CVE record

CVSS 8.5 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-93445 CVE record

CVSS 8.1 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-93447 CVE record

CVSS 7.5 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Insecure deserialization
Not analysed yet 7 Oct 2026
CVE-2026-93675 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- CWE-440
Not analysed yet 7 Oct 2026
CVE-2026-93677 CVE record

CVSS 7.7 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Information disclosure
Not analysed yet 7 Oct 2026
CVE-2026-93678 CVE record

CVSS 7.6 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 7 Oct 2026
CVE-2026-93679 CVE record

CVSS 4.3 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Denial of service
Not analysed yet 7 Oct 2026
CVE-2026-93674 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 7 Oct 2026
CVE-2026-97671 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 7 Oct 2026
CVE-2026-97673 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- CWE-693
Not analysed yet 7 Oct 2026
CVE-2026-97674 CVE record

CVSS 8.1 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-97678 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- CWE-693
Not analysed yet 6 Oct 2026
CVE-2026-97679 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-97680 CVE record

CVSS 8.3 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-97655 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-97676 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-101329 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-101331 CVE record

CVSS 7.7 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Hard-coded credentials
Not analysed yet 6 Oct 2026
CVE-2026-103360 CVE record

CVSS 8.1 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-104334 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-104335 CVE record

CVSS 8.8 High

Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-12944 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 14 Sept 2026
CVE-2026-12763 CVE record

CVSS 4.2 Medium

Langflow is vulnerable to authentication bypass and insufficient session expiration
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 14 Sept 2026