Langflow Oss
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*part: a version: 1.12.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18894 |
vulnerable | 2026-11-03 10:17:40.553046 |
Langflow OSS is affected by multiple vulnerabilities
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
Published: 2026-10-29T15:19:09.963Z
Updated: 2026-10-29T19:38:15.803Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90991 |
vulnerable | 2026-11-03 10:16:17.771515 |
Langflow OSS is affected by multiple vulnerabilities
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or throttling.
Published: 2026-10-29T15:18:45.602Z
Updated: 2026-10-29T17:17:15.737Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110190 |
vulnerable | 2026-11-03 10:16:00.965841 |
Langflow OSS is affected by multiple vulnerabilities
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system.
Published: 2026-10-29T15:15:50.730Z
Updated: 2026-10-29T17:18:06.527Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110196 |
vulnerable | 2026-11-03 10:16:00.851579 |
Langflow OSS is affected by multiple vulnerabilities
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs.
Published: 2026-10-29T15:15:26.470Z
Updated: 2026-10-30T17:18:27.761Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110309 |
vulnerable | 2026-11-03 10:16:00.820783 |
Langflow OSS is affected by multiple vulnerabilities
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.
Published: 2026-10-29T15:14:49.273Z
Updated: 2026-10-30T03:56:20.522Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-110244 |
vulnerable | 2026-11-03 10:16:00.805470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107326 |
vulnerable | 2026-11-03 10:15:59.430768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107327 |
vulnerable | 2026-11-03 10:15:59.254549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107329 |
vulnerable | 2026-11-03 10:15:59.094137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107366 |
vulnerable | 2026-11-03 10:15:59.058805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-107328 |
vulnerable | 2026-11-03 10:15:59.012049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.