Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7294467 Clear all filters
TI-2026-82530 CVE-2026-93680 · GHSA-vfwm-g9g9-v2g5

Langflow OSS authentication bypass in IBM Langflow OSS

Priority MEDIUM 53

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02181 Published 2026-10-29 No fix listed CWE-287
TI-2026-82569 CVE-2026-110186 · GHSA-mm82-q33r-3rjw

Code injection in IBM Langflow OSS allows remote code execution

Priority MEDIUM 50

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00622 Published 2026-10-29 No fix listed CWE-94
TI-2026-82571 CVE-2026-110192 · GHSA-87g8-23hv-wfrp

Insufficiently protected credentials in IBM Langflow OSS expose data

Priority LOW 28

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-29 No fix listed CWE-522
TI-2026-82572 CVE-2026-110193 · GHSA-4h9m-rvg4-x39r

Improper code generation in IBM Langflow OSS Agentic Assistant

Priority MEDIUM 41

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resultin…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00777 Published 2026-10-29 No fix listed CWE-94