| CVE-2026-7657 |
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and…
|
6.5
Moyenne
|
5 août 2026 |
| CVE-2026-17625 |
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
|
7.2
Élevée
|
5 août 2026 |
| CVE-2026-17623 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to…
|
8.8
Élevée
|
5 août 2026 |
| CVE-2026-17630 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation…
|
7.2
Élevée
|
5 août 2026 |
| CVE-2026-17626 |
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose…
|
8.8
Élevée
|
5 août 2026 |
| CVE-2026-8446 |
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP)…
|
7.5
Élevée
|
5 août 2026 |
| CVE-2026-7646 |
IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other…
|
6.5
Moyenne
|
5 août 2026 |
| CVE-2026-9077 |
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only…
|
8.5
Élevée
|
5 août 2026 |
| CVE-2026-12946 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the…
|
9.9
Critique
|
30 juil. 2026 |
| CVE-2026-13444 |
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by…
|
8.1
Élevée
|
30 juil. 2026 |
| CVE-2026-10700 |
IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API…
|
6.5
Moyenne
|
30 juil. 2026 |
| CVE-2026-13435 |
IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox…
|
9.9
Critique
|
30 juil. 2026 |
| CVE-2026-12942 |
IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system
|
7.5
Élevée
|
30 juil. 2026 |
| CVE-2026-12945 |
IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs…
|
7.1
Élevée
|
30 juil. 2026 |
| CVE-2026-12940 |
IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment…
|
9.8
Critique
|
30 juil. 2026 |
| CVE-2026-13442 |
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only…
|
7.1
Élevée
|
28 juil. 2026 |
| CVE-2026-13445 |
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read…
|
8.1
Élevée
|
17 juil. 2026 |
| CVE-2026-13446 |
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-13448 |
IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the…
|
8.1
Élevée
|
17 juil. 2026 |
| CVE-2026-14499 |
IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with…
|
8.8
Élevée
|
17 juil. 2026 |
| CVE-2026-7667 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an…
|
8.8
Élevée
|
17 juil. 2026 |
| CVE-2026-7754 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure…
|
7.7
Élevée
|
17 juil. 2026 |
| CVE-2026-7755 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation…
|
8.8
Élevée
|
17 juil. 2026 |
| CVE-2026-7872 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing…
|
7.5
Élevée
|
17 juil. 2026 |
| CVE-2026-8056 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API
|
8.8
Élevée
|
17 juil. 2026 |