| CVE-2026-8476 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-8481 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-8505 |
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows…
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-8635 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-8859 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-9103 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper…
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-9135 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d)…
|
9.9
Critique
|
17 juil. 2026 |
| CVE-2026-9198 |
Exploitée
IBM Langflow Code Injection Vulnerability
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-9202 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow…
|
9.8
Critique
|
17 juil. 2026 |
| CVE-2026-10129 |
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in…
|
8.5
Élevée
|
30 juin 2026 |
| CVE-2026-10134 |
IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and…
|
10.0
Critique
|
30 juin 2026 |
| CVE-2026-10140 |
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API…
|
9.6
Critique
|
30 juin 2026 |
| CVE-2026-10546 |
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component…
|
7.1
Élevée
|
30 juin 2026 |
| CVE-2026-10560 |
IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/…
|
8.2
Élevée
|
30 juin 2026 |
| CVE-2026-10564 |
IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF)
|
8.2
Élevée
|
30 juin 2026 |
| CVE-2026-7663 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.1
Critique
|
30 juin 2026 |
| CVE-2026-7803 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with…
|
9.8
Critique
|
30 juin 2026 |
| CVE-2026-7871 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application…
|
9.8
Critique
|
30 juin 2026 |
| CVE-2026-7873 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive…
|
9.9
Critique
|
30 juin 2026 |
| CVE-2026-7874 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak…
|
9.1
Critique
|
30 juin 2026 |
| CVE-2026-7664 |
IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and…
|
9.8
Critique
|
22 juin 2026 |
| CVE-2026-10561 |
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with…
|
10.0
Critique
|
22 juin 2026 |
| CVE-2026-7787 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by…
|
7.5
Élevée
|
11 juin 2026 |
| CVE-2026-7528 |
IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption
|
7.1
Élevée
|
27 mai 2026 |
| CVE-2026-7524 |
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links…
|
9.8
Critique
|
27 mai 2026 |