Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 22 total.
Weak PRNG used for Fernet key generation in IBM Langflow OSS (CVE-2026-8470)
IBM Langflow OSS uses Python's non-cryptographic `random` module (Mersenne Twister PRNG) to generate Fernet encryption keys when user secrets are shorter than 32 characters. Because the PRNG is deterministic, identica...
Fixed in 1.11.0
Weak PRNG in cryptographic key derivation in IBM Langflow OSS (CVE-2026-9205)
IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function, classified under CWE-338 (Use of Cryptographically Weak Pseudo-Random Number Generator). An unauthentica...
Fixed in 1.11.0
Remote code execution in IBM Langflow OSS CodeAgent component (CVE-2026-12946)
An authenticated remote attacker can execute arbitrary commands on the server by creating and running a flow that uses the CUGA component's CodeAgent. The vulnerability exists in CodeAgent's Python code execution path...
Fixed in 1.10.1
Python interpreter sandbox bypass in IBM Langflow OSS (CVE-2026-13435)
IBM Langflow OSS contains an improper input validation vulnerability in its PythonREPL sandbox implementation that allows an attacker with input access to a deployed flow or agent to bypass the code validator. Success...
Fixed in 1.10.2
Hard-coded credentials in IBM Langflow OSS (CVE-2026-13446)
IBM Langflow OSS contains hard-coded credentials (such as a password or cryptographic key) used for inbound authentication, outbound communication to external components, or encryption of internal data. Specifically, ...
Fixed in 1.10.2
Insecure file path handling in IBM Langflow OSS (CVE-2026-13445)
CVE-2026-13445 affects IBM Langflow OSS and allows an authenticated attacker to exploit the SaveToFile component to read and modify other users' uploaded files by specifying absolute paths to victim storage locations....
Fixed in 1.10.2
Unauthenticated remote code execution in IBM Langflow (CVE-2026-13448)
IBM Langflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint (/api/v1/build_public_tmp/{flow_id}/flow). The vulnerability originates from an incomplete denylist in...
Fixed in 1.10.2
OS command injection in IBM Langflow OSS Python Interpreter (CVE-2026-14499)
CVE-2026-14499 affects IBM Langflow OSS, where improper validation of user-supplied input in the Python Interpreter component allows an authenticated user to execute arbitrary OS commands with elevated privileges on t...
Fixed in 1.10.2
Path traversal in the API Request component of IBM Langflow OSS (CVE-2026-7667)
CVE-2026-7667 is a path traversal vulnerability in the API Request component of IBM Langflow OSS affecting the Content-Disposition header processing logic. An authenticated attacker can create a malicious flow pointin...
Fixed in 1.10.1
Server-side request forgery (SSRF) in IBM Langflow OSS (CVE-2026-7754)
CVE-2026-7754 is a server-side request forgery (SSRF) vulnerability in IBM Langflow OSS affecting versions 1.0.0 through 1.10.0. The vulnerability arises from an insecure default configuration and incomplete enforceme...
Fixed in 1.10.1
Path traversal in Langflow OSS File component tar extraction (CVE-2026-7872)
A path traversal vulnerability in the Langflow OSS File component's tar archive extraction functionality allows an authenticated attacker to upload a specially crafted tar archive containing symbolic links to read arb...
Fixed in 1.10.1
Remote code execution in IBM Langflow OSS (CVE-2026-7755)
CVE-2026-7755 is a remote code execution vulnerability in IBM Langflow OSS affecting the MCP server configuration file handling. The file upload endpoint accepted MCP configuration files without invoking the MCPServer...
Fixed in 1.10.1
Code injection in Langflow OSS API Graph Execution Engine (CVE-2026-8056)
CVE-2026-8056 is a code injection vulnerability in the parameter filtering mechanism of Langflow OSS's API Graph Execution Engine, specifically within the `apply_tweaks()` function. Authenticated attackers can craft A...
Fixed in 1.10.1
Remote code execution via unsafe pickle deserialization in Langflow OSS (CVE-2026-8476)
CVE-2026-8476 is a critical remote code execution vulnerability in the disk-based caching mechanism of Langflow OSS. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects ...
Fixed in 1.10.1
Remote code execution in Langflow code validation API (CVE-2026-8481)
CVE-2026-8481 is a critical remote code execution vulnerability in the Langflow OSS code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly usin...
Fixed in 1.10.1
Authentication bypass in IBM Langflow OSS (CVE-2026-8505)
CVE-2026-8505 is an authentication bypass vulnerability in IBM Langflow OSS whereby the webhook endpoint incorrectly skips API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False, which is the de...
Fixed in 1.10.1
Path traversal in IBM Langflow OSS APIRequest component (CVE-2026-8859)
A path traversal vulnerability exists in the APIRequest component of IBM Langflow OSS when the "Save to File" feature is enabled. Filenames extracted from HTTP response Content-Disposition headers are not sanitized be...
Fixed in 1.10.1
Code injection in IBM Langflow OSS Python Interpreter (CVE-2026-8635)
CVE-2026-8635 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Python Interpreter component. Authenticated users can execute arbitrary Python code via the PythonREPLComponent due to insuffi...
Fixed in 1.10.1
Code injection in IBM Langflow OSS ToolGuard component (CVE-2026-9135)
CVE-2026-9135 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Policies component's ToolGuard integration. The validation mechanism enforcing the allow_custom_components=false security cont...
Fixed in 1.10.1
Improper authentication in IBM Langflow OSS (CVE-2026-9103)
CVE-2026-9103 is an improper authentication vulnerability in IBM Langflow OSS affecting the /api/v1/login/auto_login endpoint, which issues 365-day superuser bearer tokens without requiring credentials when the AUTO_L...
Fixed in 1.10.1