Langflow Desktop
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_desktop:1.0.0:*:*:*:*:*:*:*
part: a version: 1.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Desktop (398d1ed3-3604-5cc6-b05f-cf394dfdc0ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3341 |
vulnerable | 2026-07-29 00:46:20.393867 |
IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
MEDIUM (5.4)
IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2026-06-11T14:47:57.502Z
Updated: 2026-06-11T15:46:25.100Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6543 |
vulnerable | 2026-06-08 08:07:04.876580 |
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
HIGH (8.8)
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.
Published: 2026-04-30T21:11:54.483Z
Updated: 2026-05-02T03:55:24.549Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4503 |
vulnerable | 2026-06-08 08:05:13.454134 |
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
HIGH (7.5)
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.
Published: 2026-04-30T20:48:17.662Z
Updated: 2026-06-12T18:09:02.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3340 |
vulnerable | 2026-06-08 08:01:18.424130 |
Server-Side Request Forgery (SSRF) in Langflow URL Component
MEDIUM (6.5)
IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2026-04-30T21:04:14.027Z
Updated: 2026-05-01T16:38:23.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.