Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 22 total.
Library:
langflow_oss
CVE-2026-9198
CRITICAL
CVSS 9.8
Verified Advisory
Jul 17, 2026
Unauthenticated remote code execution in Langflow OSS (CVE-2026-9198)
CVE-2026-9198 is an unauthenticated remote code execution vulnerability in Langflow OSS affecting all default deployments. An unauthenticated attacker can obtain a superuser bearer token via the /api/v1/auto_login end...
Fixed in 1.10.1
RCE
IBM
Code Injection
Langflow Oss
CVE-2026-9202
CRITICAL
CVSS 9.8
Verified Advisory
Jul 17, 2026
Missing authentication for user registration in Langflow OSS (CVE-2026-9202)
CVE-2026-9202 is a missing authentication vulnerability (CWE-306) in Langflow OSS that allows unauthenticated attackers to create unlimited user accounts via the user registration API. When the NEW_USER_IS_ACTIVE=true...
Fixed in 1.10.1
Authentication Bypass
IBM
Langflow Oss
Prev
Page 2 of 2