Langflow Oss
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_oss:1.9.3:*:*:*:*:*:*:*
part: a version: 1.9.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10561 |
vulnerable | 2026-07-29 00:23:29.680118 |
Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection
CRITICAL (10)
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise
Published: 2026-06-22T13:22:07.628Z
Updated: 2026-06-23T18:48:33.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10546 |
vulnerable | 2026-07-29 00:23:29.604952 |
DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
HIGH (7.1)
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Time-of-Check/Time-of-Use (TOCTOU) race condition that can be exploited via DNS rebinding.
Published: 2026-06-30T19:54:21.177Z
Updated: 2026-07-01T13:23:53.332Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10134 |
vulnerable | 2026-07-29 00:20:51.896554 |
Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows
CRITICAL (10)
IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in the Langflow database, can connect to internal services, abuse cloud metadata endpoints, laterally move to other tenants on the same Langflow instance, and Establish persistence by modifying the public flow's `tool_code` so normal `/api/v1/build/...` calls by any user re-execute attacker code at each build.
Published: 2026-06-30T19:56:52.069Z
Updated: 2026-07-01T17:27:28.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10129 |
vulnerable | 2026-07-29 00:20:51.892550 |
SSRF via HTTP Redirect Following in Langflow API Request Component
HIGH (8.5)
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the follow_redirects parameter and supplying a public URL that redirects to internal/localhost addresses. The vulnerability exists because the application validates only the initial URL but does not re-validate redirect destinations. This allows attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be unreachable when SSRF protection is enabled. Successful exploitation can lead to disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data.
Published: 2026-06-30T19:59:59.556Z
Updated: 2026-07-01T15:56:50.010Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.