IBM Langflow OSS

• CVE-2026-97679 High 8.8 Langflow OSS is affected by multiple vulnerabilities 0.7%
• CVE-2026-97680 High 8.3 Langflow OSS is affected by multiple vulnerabilities 0.3%
• CVE-2026-97655 High 8.8 Langflow OSS is affected by multiple vulnerabilities 0.8%
• CVE-2026-97676 High 8.8 Langflow OSS is affected by multiple vulnerabilities 0.7%
• CVE-2026-101329 Medium 6.5 Langflow OSS is affected by multiple vulnerabilities 0.3%
• CVE-2026-101331 High 7.7 Langflow OSS is affected by multiple vulnerabilities 0.3%
• CVE-2026-103360 High 8.1 Langflow OSS is affected by multiple vulnerabilities 0.5%
• CVE-2026-104334 Critical 9.8 Langflow OSS is affected by multiple vulnerabilities 0.7%
• CVE-2026-104335 High 8.8 Langflow OSS is affected by multiple vulnerabilities 0.9%
• CVE-2026-12944 Critical 9.6 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution 0.4%
• CVE-2026-12763 Medium 4.2 Langflow is vulnerable to authentication bypass and insufficient session expiration 0.2%
• CVE-2026-12765 Medium 6.5 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components 0.3%
• CVE-2026-12766 Medium 5.4 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components 0.2%
• CVE-2026-12767 Medium 6.5 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches 0.3%
• CVE-2026-17628 Medium 5.4 Langflow is affected by improper authentication due to missing password verification in the password reset endpoint 0.4%
• CVE-2026-76059 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.7%
• CVE-2026-78569 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.7%
• CVE-2026-78571 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.8%
• CVE-2026-78575 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.8%
• CVE-2026-79723 Medium 5.0 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches 0.4%
• CVE-2026-79724 Critical 9.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.7%
• CVE-2026-79725 Medium 6.5 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation 0.4%
• CVE-2026-79742 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.9%
• CVE-2026-81204 Critical 9.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.9%
• CVE-2026-81211 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.6%
• CVE-2026-81941 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.6%
• CVE-2026-81213 High 8.6 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches 0.5%
• CVE-2026-81265 High 7.5 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches 0.4%
• CVE-2026-81268 High 8.1 Langflow is vulnerable to authentication bypass and insufficient session expiration 0.4%
• CVE-2026-81940 High 8.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.8%
• CVE-2026-84889 High 8.8 A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem 0.9%
• CVE-2026-85025 Critical 9.8 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards 0.6%
• CVE-2026-9225 Medium 6.5 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation 0.4%
• CVE-2026-14470 Medium 6.5 Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components 0.5%
• CVE-2026-17627 Medium 4.9 Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint 0.3%
• CVE-2026-17621 Medium 5.4 Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components 0.4%
• CVE-2026-17622 Medium 6.5 Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components 0.7%
• CVE-2026-17631 Medium 5.0 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components 0.4%
• CVE-2026-19298 High 8.8 Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint 0.9%
• CVE-2026-19301 Medium 5.0 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components 0.4%
• CVE-2026-19303 High 8.1 Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components 0.6%
• CVE-2026-19300 High 7.5 Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows 0.5%
• CVE-2026-19299 Medium 6.5 Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components 0.7%
• CVE-2026-19302 Medium 6.5 Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components 0.7%
• CVE-2026-19304 High 7.7 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components 0.4%
• CVE-2026-19305 High 8.6 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components 0.5%
• CVE-2026-19306 High 7.7 Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components 0.5%
• CVE-2026-9138 Medium 6.5 Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components 0.5%
• CVE-2026-8447 Medium 6.1 Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust 0.3%
• CVE-2026-9186 Medium 6.5 Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust 0.4%