IBM Langflow Desktop

• CVE-2026-3341 Medium 5.4 IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services 0.1%
• CVE-2026-6543 High 8.8 Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint 0.5%
• CVE-2026-3345 Medium 6.5 Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint 0.4%
• CVE-2026-3346 Medium 6.4 Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw 0.2%
• CVE-2026-3340 Medium 6.5 Server-Side Request Forgery (SSRF) in Langflow URL Component 0.2%
• CVE-2026-4502 Medium 6.5 Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API 0.3%
• CVE-2026-4503 High 7.5 Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint 0.3%
• CVE-2026-3357 High 8.8 IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file 0.5%