| CVE-2026-19294 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private…
|
6.4
Medium
|
Aug 28, 2026 |
| CVE-2026-19286 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper…
|
9.8
Critical
|
Aug 28, 2026 |
| CVE-2026-18904 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject…
|
8.2
High
|
Aug 28, 2026 |
| CVE-2026-18899 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal
|
7.5
High
|
Aug 28, 2026 |
| CVE-2026-18891 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive…
|
8.2
High
|
Aug 28, 2026 |
| CVE-2026-18729 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to…
|
8.8
High
|
Aug 28, 2026 |
| CVE-2026-18545 |
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF)
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-19875 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and…
|
7.5
High
|
Aug 19, 2026 |
| CVE-2026-19297 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to…
|
9.1
Critical
|
Aug 13, 2026 |
| CVE-2026-17624 |
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
|
8.5
High
|
Aug 5, 2026 |
| CVE-2026-17633 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to…
|
8.5
High
|
Aug 5, 2026 |
| CVE-2026-17632 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to…
|
8.8
High
|
Aug 5, 2026 |
| CVE-2026-9196 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic…
|
8.1
High
|
Aug 5, 2026 |
| CVE-2026-8182 |
IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server…
|
8.8
High
|
Aug 5, 2026 |
| CVE-2026-9201 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a…
|
8.8
High
|
Aug 5, 2026 |
| CVE-2026-8478 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the…
|
8.8
High
|
Aug 5, 2026 |
| CVE-2026-8183 |
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
|
7.7
High
|
Aug 5, 2026 |
| CVE-2026-7658 |
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path…
|
6.5
Medium
|
Aug 5, 2026 |
| CVE-2026-9130 |
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows…
|
7.1
High
|
Aug 5, 2026 |
| CVE-2026-10547 |
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST…
|
5.9
Medium
|
Aug 5, 2026 |
| CVE-2026-7869 |
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST…
|
5.4
Medium
|
Aug 5, 2026 |
| CVE-2026-8470 |
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's…
|
7.4
High
|
Aug 5, 2026 |
| CVE-2026-9205 |
IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function
|
7.4
High
|
Aug 5, 2026 |
| CVE-2026-10128 |
IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read…
|
6.5
Medium
|
Aug 5, 2026 |
| CVE-2026-9081 |
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF)…
|
7.1
High
|
Aug 5, 2026 |