| CVE-2026-8476 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8481 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8505 |
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-8635 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8859 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-9103 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-9135 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d)…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-9198 |
Exploited
IBM Langflow Code Injection Vulnerability
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-9202 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-10129 |
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in…
|
8.5
High
|
Jun 30, 2026 |
| CVE-2026-10134 |
IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and…
|
10.0
Critical
|
Jun 30, 2026 |
| CVE-2026-10140 |
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API…
|
9.6
Critical
|
Jun 30, 2026 |
| CVE-2026-10546 |
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component…
|
7.1
High
|
Jun 30, 2026 |
| CVE-2026-10560 |
IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/…
|
8.2
High
|
Jun 30, 2026 |
| CVE-2026-10564 |
IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF)
|
8.2
High
|
Jun 30, 2026 |
| CVE-2026-7663 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.1
Critical
|
Jun 30, 2026 |
| CVE-2026-7803 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with…
|
9.8
Critical
|
Jun 30, 2026 |
| CVE-2026-7871 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application…
|
9.8
Critical
|
Jun 30, 2026 |
| CVE-2026-7873 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive…
|
9.9
Critical
|
Jun 30, 2026 |
| CVE-2026-7874 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak…
|
9.1
Critical
|
Jun 30, 2026 |
| CVE-2026-7664 |
IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.8
Critical
|
Jun 22, 2026 |
| CVE-2026-10561 |
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with…
|
10.0
Critical
|
Jun 22, 2026 |
| CVE-2026-7787 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by…
|
7.5
High
|
Jun 11, 2026 |
| CVE-2026-7528 |
IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption
|
7.1
High
|
May 27, 2026 |
| CVE-2026-7524 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links…
|
9.8
Critical
|
May 27, 2026 |