Langflow Oss
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_oss:1.8.4:*:*:*:*:*:*:*
part: a version: 1.8.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7664 |
vulnerable | 2026-07-29 01:09:05.118232 |
Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.
Published: 2026-06-22T14:10:25.584Z
Updated: 2026-06-23T18:48:23.307Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6542 |
vulnerable | 2026-06-08 08:07:04.874053 |
Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.
Published: 2026-04-30T21:16:10.787Z
Updated: 2026-05-01T15:00:43.375Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.