Skip to content

Known vulnerabilities in IBM Langflow OSS

Is your version affected?

CVE Summary Score Published
CVE-2026-110190 IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system 6.5 Medium Oct 29, 2026
CVE-2026-110192 Langflow OSS is affected by multiple vulnerabilities 6.5 Medium Oct 29, 2026
CVE-2026-110193 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause… 8.8 High Oct 29, 2026
CVE-2026-110196 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to… 8.8 High Oct 29, 2026
CVE-2026-110200 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to… 6.5 Medium Oct 29, 2026
CVE-2026-110244 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to… 8.8 High Oct 29, 2026
CVE-2026-110245 Langflow OSS is affected by multiple vulnerabilities 7.5 High Oct 29, 2026
CVE-2026-110309 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to… 8.8 High Oct 29, 2026
CVE-2026-107366 IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification 8.3 High Oct 19, 2026
CVE-2026-88962 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 7, 2026
CVE-2026-93443 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 7.5 High Oct 7, 2026
CVE-2026-93448 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to… 6.5 Medium Oct 7, 2026
CVE-2026-93449 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.5 High Oct 7, 2026
CVE-2026-93445 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.1 High Oct 7, 2026
CVE-2026-93447 IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to… 7.5 High Oct 7, 2026
CVE-2026-93675 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected… 8.8 High Oct 7, 2026
CVE-2026-93677 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to… 7.7 High Oct 7, 2026
CVE-2026-93678 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to… 7.6 High Oct 7, 2026
CVE-2026-93679 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to… 4.3 Medium Oct 7, 2026
CVE-2026-93674 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper… 9.8 Critical Oct 7, 2026
CVE-2026-97671 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to… 6.5 Medium Oct 7, 2026
CVE-2026-97673 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 7, 2026
CVE-2026-97674 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due… 8.1 High Oct 6, 2026
CVE-2026-97678 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 6, 2026
CVE-2026-97679 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to… 8.8 High Oct 6, 2026

Other IBM products