Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:langflow_oss:1.9.1:*:*:*:*:*:*:*

part: a version: 1.9.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLangflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7787 vulnerable 2026-07-29 01:09:05.240561 Unauthenticated Session History Access via Public Flow Execution
HIGH (7.5)
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.
Published: 2026-06-11T14:41:21.549Z
Updated: 2026-06-11T16:08:51.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7524 vulnerable 2026-06-08 08:08:57.367514 Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
Published: 2026-05-27T13:14:23.238Z
Updated: 2026-05-28T13:26:42.977Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.