| CVE-2026-9135 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d)…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-9198 |
Exploited
IBM Langflow Code Injection Vulnerability
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-9202 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-10134 |
IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and…
|
10.0
Critical
|
Jun 30, 2026 |
| CVE-2026-10140 |
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API…
|
9.6
Critical
|
Jun 30, 2026 |
| CVE-2026-7663 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.1
Critical
|
Jun 30, 2026 |
| CVE-2026-7803 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with…
|
9.8
Critical
|
Jun 30, 2026 |
| CVE-2026-7871 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application…
|
9.8
Critical
|
Jun 30, 2026 |
| CVE-2026-7873 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive…
|
9.9
Critical
|
Jun 30, 2026 |
| CVE-2026-7874 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak…
|
9.1
Critical
|
Jun 30, 2026 |
| CVE-2026-7664 |
IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.8
Critical
|
Jun 22, 2026 |
| CVE-2026-10561 |
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with…
|
10.0
Critical
|
Jun 22, 2026 |
| CVE-2026-7524 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links…
|
9.8
Critical
|
May 27, 2026 |