Vulnerabilities

TI-2026-07978 CVE-2026-9081 · GHSA-fqv5-gx59-2xgv

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

LOW 31

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00306 Published 2026-08-05 No fix listed CWE-918

TI-2026-06739 CVE-2026-7657 · GHSA-94h9-q657-456h

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

LOW 29

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00375 Published 2026-08-05 No fix listed CWE-918

Vulnerabilities

Filters

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality