Skip to content

Known vulnerabilities in IBM Langflow Desktop

Is your version affected?

CVE Summary Score Published
CVE-2026-3341 IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 11, 2026
CVE-2026-6543 IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges… 8.8 High Apr 30, 2026
CVE-2026-3345 IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system 6.5 Medium Apr 30, 2026
CVE-2026-3346 IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting 6.4 Medium Apr 30, 2026
CVE-2026-3340 IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF) 6.5 Medium Apr 30, 2026
CVE-2026-4502 IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the… 6.5 Medium Apr 30, 2026
CVE-2026-4503 IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to… 7.5 High Apr 30, 2026
CVE-2026-3357 IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the… 8.8 High Apr 8, 2026

Other IBM products