Advisories · Technology

IBM Langflow OSS.

Every CVE that names IBM Langflow OSS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7869 CVE record

CVSS 5.4 Medium

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
- IBM Langflow OSS
- Path traversal
Not analysed yet 5 Aug 2026
CVE-2026-8470 CVE record

CVSS 7.4 High

Langflow is affected by weaknesses in secret handling and sensitive configuration access
- IBM Langflow OSS
- Weak cryptography or TLS
Not analysed yet 5 Aug 2026
CVE-2026-10128 CVE record

CVSS 6.5 Medium

Langflow is affected by weaknesses in secret handling and sensitive configuration access
- IBM Langflow OSS
- Information disclosure
Not analysed yet 5 Aug 2026
CVE-2026-9081 CVE record

CVSS 7.1 High

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 5 Aug 2026
CVE-2026-7657 CVE record

CVSS 6.5 Medium

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 5 Aug 2026
CVE-2026-17625 CVE record

CVSS 7.2 High

Langflow is affected by OS Command Injection in Model Context Protocol features
- IBM Langflow OSS
- Command injection
Not analysed yet 5 Aug 2026
CVE-2026-17623 CVE record

CVSS 8.8 High

Langflow is affected OS Command Injection in Model Context Protocol features
- IBM Langflow OSS
- Command injection
Not analysed yet 5 Aug 2026
CVE-2026-17630 CVE record

CVSS 7.2 High

Langflow is affected by security vulnerabilities in Model Context Protocol features
- IBM Langflow OSS
- CWE-184
Not analysed yet 5 Aug 2026
CVE-2026-17626 CVE record

CVSS 8.8 High

Langflow is affected by security vulnerabilities in Model Context Protocol features
- IBM Langflow OSS
- Privilege escalation
Not analysed yet 5 Aug 2026
CVE-2026-8446 CVE record

CVSS 7.5 High

Langflow is affected by security vulnerabilities in Model Context Protocol features
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 5 Aug 2026
CVE-2026-7646 CVE record

CVSS 6.5 Medium

Langflow is affected by security vulnerabilities in Model Context Protocol features
- IBM Langflow OSS
- Path traversal
Not analysed yet 5 Aug 2026
CVE-2026-9077 CVE record

CVSS 8.5 High

Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
- IBM Langflow OSS
- CWE-807
Not analysed yet 5 Aug 2026
CVE-2026-12946 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Remote Code Execution in CUGA Component CodeAgent
- IBM Langflow OSS
- Code injection
Not analysed yet 30 Jul 2026
CVE-2026-13444 CVE record

CVSS 8.1 High

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- CWE-520
Not analysed yet 30 Jul 2026
CVE-2026-10700 CVE record

CVSS 6.5 Medium

Broken Access Control Vulnerabilities in Langflow 1.0.0 - 1.8.4 File Handling API Allowed Unauthorized Access to User Files
- IBM Langflow OSS
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2026-13435 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure
- IBM Langflow OSS
- Code injection
Not analysed yet 30 Jul 2026
CVE-2026-12942 CVE record

CVSS 7.5 High

Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Path traversal
Not analysed yet 30 Jul 2026
CVE-2026-12945 CVE record

CVSS 7.1 High

Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2026-12940 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-13442 CVE record

CVSS 7.1 High

Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- CWE-520
Not analysed yet 28 Jul 2026
CVE-2026-13445 CVE record

CVSS 8.1 High

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Broken access control
Not analysed yet 17 Jul 2026
CVE-2026-13446 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Hard-coded credentials
Not analysed yet 17 Jul 2026
CVE-2026-13448 CVE record

CVSS 8.1 High

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- CWE-184
Not analysed yet 17 Jul 2026
CVE-2026-14499 CVE record

CVSS 8.8 High

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- Command injection
Not analysed yet 17 Jul 2026
CVE-2026-7667 CVE record

CVSS 8.8 High

Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing
- IBM Langflow OSS
- Path traversal
Not analysed yet 17 Jul 2026
CVE-2026-7754 CVE record

CVSS 7.7 High

SSRF Protection Configuration Vulnerability
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 17 Jul 2026
CVE-2026-7755 CVE record

CVSS 8.8 High

MCP Server Configuration Validator Bypass via File Upload API
- IBM Langflow OSS
- CWE-20
Not analysed yet 17 Jul 2026
CVE-2026-7872 CVE record

CVSS 7.5 High

Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass
- IBM Langflow OSS
- Path traversal
Not analysed yet 17 Jul 2026
CVE-2026-8056 CVE record

CVSS 8.8 High

Parameter Injection Vulnerability in API Graph Execution Engine
- IBM Langflow OSS
- Code injection
Not analysed yet 17 Jul 2026
CVE-2026-8476 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Disk Cache Deserialization Remote Code Execution Vulnerability
- IBM Langflow OSS
- Insecure deserialization
Not analysed yet 17 Jul 2026
CVE-2026-8481 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Remote Code Execution via Code Validation Endpoint
- IBM Langflow OSS
- Code injection
Not analysed yet 17 Jul 2026
CVE-2026-8635 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Arbitrary Code Execution in Python Interpreter Component
- IBM Langflow OSS
- Code injection
Not analysed yet 17 Jul 2026
CVE-2026-8859 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path Traversal in APIRequest Component via Content-Disposition Header
- IBM Langflow OSS
- Path traversal
Not analysed yet 17 Jul 2026
CVE-2026-9103 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Superuser Token Issuance via Auto-Login Endpoint
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 17 Jul 2026
CVE-2026-9135 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation
- IBM Langflow OSS
- Code injection
Not analysed yet 17 Jul 2026
CVE-2026-9198 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
- IBM Langflow OSS
- Code injection
Not analysed yet 17 Jul 2026
CVE-2026-9202 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated User Registration Could Lead to Remote Code Execution
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 17 Jul 2026
CVE-2026-10129 CVE record

CVSS 8.5 High

SSRF via HTTP Redirect Following in Langflow API Request Component
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2026
CVE-2026-10134 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows
- IBM Langflow OSS
- Code injection
Not analysed yet 30 Jun 2026
CVE-2026-10140 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem
- IBM Langflow OSS
- Broken access control
Not analysed yet 30 Jun 2026
CVE-2026-10546 CVE record

CVSS 7.1 High

DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2026
CVE-2026-10560 CVE record

CVSS 8.2 High

Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 30 Jun 2026
CVE-2026-10564 CVE record

CVSS 8.2 High

SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection
- IBM Langflow OSS
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2026
CVE-2026-7663 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass
- IBM Langflow OSS
- Broken access control
Not analysed yet 30 Jun 2026
CVE-2026-7803 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Flow Validation Bypass via Empty Component Type Field
- IBM Langflow OSS
- CWE-20
Not analysed yet 30 Jun 2026
CVE-2026-7871 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Insecure Deserialization in Redis Cache Backend
- IBM Langflow OSS
- Insecure deserialization
Not analysed yet 30 Jun 2026
CVE-2026-7874 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Weak Cryptographic Key Derivation Exposed All Stored Credentials
- IBM Langflow OSS
- Weak cryptography or TLS
Not analysed yet 30 Jun 2026
CVE-2026-7664 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS
- IBM Langflow OSS
- Authentication bypass
Not analysed yet 22 Jun 2026
CVE-2026-7787 CVE record

CVSS 7.5 High

Unauthenticated Session History Access via Public Flow Execution
- IBM Langflow OSS
- Broken access control
Not analysed yet 11 Jun 2026
CVE-2026-7528 CVE record

CVSS 7.1 High

Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS
- IBM Langflow OSS
- Denial of service
Not analysed yet 27 May 2026
CVE-2026-7524 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution
- IBM Langflow OSS
- Path traversal
Not analysed yet 27 May 2026
CVE-2026-6542 CVE record

CVSS 6.5 Medium

Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id
- IBM Langflow OSS
- Broken access control
Not analysed yet 30 Apr 2026