Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 681 total.
Remote code execution via unsafe pickle deserialization in Langflow OSS (CVE-2026-8476)
CVE-2026-8476 is a critical remote code execution vulnerability in the disk-based caching mechanism of Langflow OSS. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects ...
Fixed in 1.10.1
Remote code execution in Langflow code validation API (CVE-2026-8481)
CVE-2026-8481 is a critical remote code execution vulnerability in the Langflow OSS code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly usin...
Fixed in 1.10.1
Authentication bypass in IBM Langflow OSS (CVE-2026-8505)
CVE-2026-8505 is an authentication bypass vulnerability in IBM Langflow OSS whereby the webhook endpoint incorrectly skips API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False, which is the de...
Fixed in 1.10.1
Path traversal in IBM Langflow OSS APIRequest component (CVE-2026-8859)
A path traversal vulnerability exists in the APIRequest component of IBM Langflow OSS when the "Save to File" feature is enabled. Filenames extracted from HTTP response Content-Disposition headers are not sanitized be...
Fixed in 1.10.1
Code injection in IBM Langflow OSS Python Interpreter (CVE-2026-8635)
CVE-2026-8635 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Python Interpreter component. Authenticated users can execute arbitrary Python code via the PythonREPLComponent due to insuffi...
Fixed in 1.10.1
Stored XSS in Roundcube Webmail (CVE-2026-54433)
CVE-2026-54433 is a zero-click stored cross-site scripting (XSS) vulnerability in Roundcube Webmail's plain-text rendering component. The vulnerability was reported by Bohdan Kurinnoy of Samsung R&D Institute Ukraine ...
Fixed in 1.6.17; 1.7.2
Path traversal in AsyncSSH AuthorizedKeysFile username expansion (CVE-2026-45309)
CVE-2026-45309 is a path traversal vulnerability (CWE-22) in AsyncSSH 2.22.0 in which the `AuthorizedKeysFile` `%u` token is expanded using the raw SSH username without sanitizing path separators or `..` segments. On ...
Fixed in 2.23.0
Channel-binding downgrade in `com (CVE-2026-53712)
CVE-2026-53712 is a channel-binding downgrade vulnerability in `com.ongres.scram:scram-client` that allows a TLS man-in-the-middle attacker to silently downgrade authentication from `SCRAM-SHA-256-PLUS` (with channel ...
Fixed in 3.3
Code injection in IBM Langflow OSS ToolGuard component (CVE-2026-9135)
CVE-2026-9135 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Policies component's ToolGuard integration. The validation mechanism enforcing the allow_custom_components=false security cont...
Fixed in 1.10.1
Improper authentication in IBM Langflow OSS (CVE-2026-9103)
CVE-2026-9103 is an improper authentication vulnerability in IBM Langflow OSS affecting the /api/v1/login/auto_login endpoint, which issues 365-day superuser bearer tokens without requiring credentials when the AUTO_L...
Fixed in 1.10.1
Authentication bypass in meta-ads-mcp AuthInjectionMiddleware (CVE-2026-54547)
An authentication bypass vulnerability in `AuthInjectionMiddleware` within the `meta-ads-mcp` package allows an unauthenticated network attacker to send an HTTP request bearing only the `X-Pipeboard-Token` header with...
Fixed in 1.0.115
OS command injection in Agentic-Flow MCP server (CVE-2026-58195)
Agentic-Flow, an AI agent orchestration platform, contains an OS command injection vulnerability in its MCP server tools where attacker-influenceable tool parameters (such as agent, task, name, language, and agentdb) ...
Fixed in 2.0.14
Server-Side Request Forgery in meta-ads-mcp (CVE-2026-54549)
CVE-2026-54549 is a Server-Side Request Forgery (SSRF) vulnerability in the `upload_ad_image` MCP tool of the `meta-ads-mcp` package, in which an attacker-controlled `image_url` parameter is passed directly to `httpx....
Fixed in 1.0.115
Incomplete privilege drop in the Python `sh` package (CVE-2026-54552)
CVE-2026-54552 is an incomplete privilege drop vulnerability in the Python `sh` package affecting Linux/Unix-like systems. When the `_uid` option is used to launch a subprocess as a less-privileged user from an elevat...
Fixed in 2.2.4
Brute-force vulnerability in Yamcs Mission Control Server (CVE-2026-44596)
The authentication endpoint `POST /auth/token` in `yamcs-core` (Maven package `org.yamcs:yamcs-core`) lacks rate limiting, account lockout, and failed attempt throttling, allowing an unauthenticated remote attacker to...
Fixed in 5.13.0; 5.12.7
Unauthenticated remote code execution in Langflow OSS (CVE-2026-9198)
CVE-2026-9198 is an unauthenticated remote code execution vulnerability in Langflow OSS affecting all default deployments. An unauthenticated attacker can obtain a superuser bearer token via the /api/v1/auto_login end...
Fixed in 1.10.1
Missing authentication for user registration in Langflow OSS (CVE-2026-9202)
CVE-2026-9202 is a missing authentication vulnerability (CWE-306) in Langflow OSS that allows unauthenticated attackers to create unlimited user accounts via the user registration API. When the NEW_USER_IS_ACTIVE=true...
Fixed in 1.10.1
Authorization bypass in Cilium Gateway API HTTPRoute traffic mirroring (CVE-2026-56742)
In Cilium clusters with Gateway API enabled, users with permissions to create or update namespaced HTTPRoutes can mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechani...
Fixed in 1.17.17; 1.18.11; 1.19.5
Insecure direct object reference in Chat2DB (CVE-2026-63307)
Chat2DB contains an insecure direct object reference (IDOR) vulnerability (CWE-639) in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership ...
Fixed in 5.3.0
Heap use-after-free in YAML::Syck for Perl (CVE-2026-57076)
CVE-2026-57076 is a heap use-after-free vulnerability in YAML::Syck for Perl, located in the bundled libsyck library's syck_hdlr_add_anchor function. An anchor name is stored as both a node field and a key in the pars...
Fixed in 1.47