Langflow Oss
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_oss:1.9.6:*:*:*:*:*:*:*
part: a version: 1.9.6 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7663 |
vulnerable | 2026-07-29 01:09:05.116542 |
Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass
CRITICAL (9.1)
IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.
Published: 2026-06-30T19:16:25.323Z
Updated: 2026-07-01T03:56:01.122Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10564 |
vulnerable | 2026-07-29 00:23:29.688539 |
SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection
HIGH (8.2)
IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.
Published: 2026-06-30T19:51:55.253Z
Updated: 2026-07-01T14:48:45.449Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10560 |
vulnerable | 2026-07-29 00:23:29.679782 |
Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS
HIGH (8.2)
IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a valid job identifier, resulting in information disclosure and denial of service.
Published: 2026-06-30T19:53:20.632Z
Updated: 2026-07-01T14:29:49.766Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.