What is the CVSS score of CVE-2026-7657?

CVE-2026-7657 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-7657?

Yes, a patch is available for CVE-2026-7657. Update the affected software to the latest version immediately.

IBM Langflow OSS CVE-2026-7657

EUVD-2026-53567 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-08-05 ibm

GHSA-94h9-q657-456h

IBM SSRF Langflow Oss

6.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Network-reachable via authenticated workflow input (PR:L); low complexity bypass of existing filter; confidentiality-only impact with no integrity or availability effect and no scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 18:21 vuln.today

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement.

AnalysisAI

Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.10.3 allows low-privileged authenticated users to force the server to make arbitrary outbound HTTP requests to internal or restricted network destinations due to incomplete enforcement of the platform's built-in SSRF protections. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms network-reachable exploitation at low complexity with high confidentiality impact, making cloud metadata endpoints and internal services realistic targets. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate with low-privileged Langflow account

Delivery

Craft workflow with attacker-controlled URL input

Exploit

Submit URL targeting internal network resource

Execution

Bypass incomplete SSRF URL filter

Persist

Server fetches internal endpoint on attacker's behalf

Impact

Exfiltrate sensitive response data

Access

Authenticate with low-privileged Langflow account

Delivery

Craft workflow with attacker-controlled URL input

Exploit

Submit URL targeting internal network resource

Execution

Bypass incomplete SSRF URL filter

Persist

Server fetches internal endpoint on attacker's behalf

Impact

Exfiltrate sensitive response data

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid, low-privileged authenticated session on the Langflow instance - unauthenticated access is not indicated by the CVSS PR:L vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS base score of 6.5 (Medium) accurately reflects the bounded nature of this SSRF: exploitation requires authentication (PR:L), there is no scope change (S:U), and impact is confidentiality-only (C:H/I:N/A:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An authenticated Langflow user with a low-privileged account constructs a workflow that passes a crafted URL - targeting an internal resource such as the AWS EC2 instance metadata service at http://169.254.169.254/latest/meta-data/iam/security-credentials/ - to a Langflow component that triggers a backend HTTP fetch. The existing SSRF filter is bypassed (e.g., via a redirect or encoded IP representation), the server retrieves the internal endpoint, and the response containing IAM role credentials is returned to the attacker. …
Remediation	Apply the vendor-released patch per IBM's advisory at https://www.ibm.com/support/pages/node/7282650. … Detailed patch versions, workarounds, and compensating controls in full report.