| CVE-2026-9135 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d)…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-9198 |
Exploitée
IBM Langflow Code Injection Vulnerability
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-9202 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow…
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-10134 |
IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and…
|
10.0
Critique
|
30 juin 2026 |
| CVE-2026-10140 |
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API…
|
9.6
Critique
|
30 juin 2026 |
| CVE-2026-7663 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.1
Critique
|
30 juin 2026 |
| CVE-2026-7803 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with…
|
9.8
Critique
|
30 juin 2026 |
| CVE-2026-7871 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application…
|
9.8
Critique
|
30 juin 2026 |
| CVE-2026-7873 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive…
|
9.9
Critique
|
30 juin 2026 |
| CVE-2026-7874 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak…
|
9.1
Critique
|
30 juin 2026 |
| CVE-2026-7664 |
IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.8
Critique
|
22 juin 2026 |
| CVE-2026-10561 |
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with…
|
10.0
Critique
|
22 juin 2026 |
| CVE-2026-7524 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links…
|
9.8
Critique
|
27 mai 2026 |