Product by IBM

    Langflow Desktop Oss

    15 known vulnerabilities in Langflow Desktop Oss (IBM), 1 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Langflow Desktop Oss (IBM)
    CriticalCVE-2026-9198

    Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

    In CISA KEValso in 2 other products

    		9.8
    CriticalCVE-2026-9103

    Unauthenticated Superuser Token Issuance via Auto-Login Endpoint

    also in 2 other products

    		9.8
    CriticalCVE-2026-8476

    Disk Cache Deserialization Remote Code Execution Vulnerability

    also in 2 other products

    		9.9
    CriticalCVE-2026-8481

    Remote Code Execution via Code Validation Endpoint

    also in 2 other products

    		9.9
    CriticalCVE-2026-9135

    Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation

    also in 2 other products

    		9.9
    CriticalCVE-2026-8505

    Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

    also in 2 other products

    		9.8
    CriticalCVE-2026-8635

    Arbitrary Code Execution in Python Interpreter Component

    also in 2 other products

    		9.9
    HighCVE-2026-7755

    MCP Server Configuration Validator Bypass via File Upload API

    also in 2 other products

    		8.8
    CriticalCVE-2026-8859

    Path Traversal in APIRequest Component via Content-Disposition Header

    also in 2 other products

    		9.9
    CriticalCVE-2026-9202

    Unauthenticated User Registration Could Lead to Remote Code Execution

    also in 2 other products

    		9.8
    HighCVE-2026-7667

    Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing

    also in 2 other products

    		8.8
    HighCVE-2026-7872

    IBM Langflow OSS: Path Traversal

    also in 2 other products

    		8.1
    HighCVE-2026-8056

    Parameter Injection Vulnerability in API Graph Execution Engine

    also in 2 other products

    		8.8
    MediumCVE-2026-10700

    IBM Langflow OSS: Authorization Bypass Through User-Controlled Key

    also in 2 other products

    		6.5
    HighCVE-2026-7754

    SSRF Protection Configuration Vulnerability

    also in 2 other products

    		6.5

    News

    All products by IBM