| CVE-2026-97680 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or…
|
8.3
Élevée
|
6 oct. 2026 |
| CVE-2026-97655 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete…
|
8.8
Élevée
|
6 oct. 2026 |
| CVE-2026-97676 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to…
|
8.8
Élevée
|
6 oct. 2026 |
| CVE-2026-101329 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to…
|
6.5
Moyenne
|
6 oct. 2026 |
| CVE-2026-101331 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to…
|
7.7
Élevée
|
6 oct. 2026 |
| CVE-2026-103360 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to…
|
8.1
Élevée
|
6 oct. 2026 |
| CVE-2026-104334 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of…
|
9.8
Critique
|
6 oct. 2026 |
| CVE-2026-104335 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to…
|
8.8
Élevée
|
6 oct. 2026 |
| CVE-2026-12944 |
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges…
|
9.6
Critique
|
14 sept. 2026 |
| CVE-2026-12763 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server…
|
4.2
Moyenne
|
14 sept. 2026 |
| CVE-2026-12765 |
IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF)
|
6.5
Moyenne
|
14 sept. 2026 |
| CVE-2026-12766 |
IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF)
|
5.4
Moyenne
|
14 sept. 2026 |
| CVE-2026-12767 |
IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF)
|
6.5
Moyenne
|
14 sept. 2026 |
| CVE-2026-17628 |
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account…
|
5.4
Moyenne
|
14 sept. 2026 |
| CVE-2026-76059 |
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-78569 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-78571 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-78575 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-79723 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to…
|
5.0
Moyenne
|
10 sept. 2026 |
| CVE-2026-79724 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper…
|
9.8
Critique
|
10 sept. 2026 |
| CVE-2026-79725 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to…
|
6.5
Moyenne
|
10 sept. 2026 |
| CVE-2026-79742 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-81204 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection…
|
9.8
Critique
|
10 sept. 2026 |
| CVE-2026-81211 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due…
|
8.8
Élevée
|
10 sept. 2026 |
| CVE-2026-81941 |
IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary…
|
8.8
Élevée
|
10 sept. 2026 |