Skip to content

Known vulnerabilities in IBM Langflow OSS

Is your version affected?

CVE Summary Score Published
CVE-2026-18894 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code… 6.5 Medium Oct 29, 2026
CVE-2026-77817 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to… 6.5 Medium Oct 29, 2026
CVE-2026-77819 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to… 6.5 Medium Oct 29, 2026
CVE-2026-90991 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to… 6.5 Medium Oct 29, 2026
CVE-2026-93680 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper… 9.8 Critical Oct 29, 2026
CVE-2026-102590 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to… 5.0 Medium Oct 29, 2026
CVE-2026-103092 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands… 8.5 High Oct 29, 2026
CVE-2026-101288 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 29, 2026
CVE-2026-104308 Langflow OSS is affected by multiple vulnerabilities 4.3 Medium Oct 29, 2026
CVE-2026-104309 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to… 6.5 Medium Oct 29, 2026
CVE-2026-104310 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to… 4.3 Medium Oct 29, 2026
CVE-2026-104312 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive… 3.5 Low Oct 29, 2026
CVE-2026-104314 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target… 6.5 Medium Oct 29, 2026
CVE-2026-104315 Langflow OSS is affected by multiple vulnerabilities 4.3 Medium Oct 29, 2026
CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background… 6.5 Medium Oct 29, 2026
CVE-2026-104317 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute… 8.1 High Oct 29, 2026
CVE-2026-104324 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 29, 2026
CVE-2026-104328 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 29, 2026
CVE-2026-104331 Langflow OSS is affected by multiple vulnerabilities 5.4 Medium Oct 29, 2026
CVE-2026-104339 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper… 9.8 Critical Oct 29, 2026
CVE-2026-107326 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 29, 2026
CVE-2026-107327 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to… 9.9 Critical Oct 29, 2026
CVE-2026-107328 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to… 9.9 Critical Oct 29, 2026
CVE-2026-107329 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to… 9.9 Critical Oct 29, 2026
CVE-2026-110186 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of… 9.8 Critical Oct 29, 2026

Other IBM products