What is the CVSS score of CVE-2026-7754?

CVE-2026-7754 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of Langflow Oss are affected by CVE-2026-7754?

IBM Langflow (versions 1.0.0-1.10.0 and 1.9.0) contains a server-side request forgery vulnerability allowing authenticated users to bypass built-in protections and direct the server to access…. A patch is available.

How to fix or mitigate CVE-2026-7754?

Within 24 hours, identify and document all IBM Langflow instances in your environment and determine which are running versions 1.0.0-1.10.0 (OSS) or 1.9.0 (Langflow product). Within 7 days, apply the vendor-released patch to upgrade all affected instances to patched versions. Within 30 days, review server audit logs for unauthorized outbound requests originating from Langflow services, audit workflow configurations created by low-privileged users during the vulnerable period, and implement network egress filtering or segmentation to limit the blast radius of future SSRF exploits.

Langflow Oss CVE-2026-7754

EUVD-2026-45286 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-17 ibm

GHSA-7wqc-w7wj-5fm5

SSRF IBM Langflow Oss

6.5

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Severity Changed

Jul 20, 2026 - 18:07 NVD

HIGH MEDIUM

CVSS changed

Jul 20, 2026 - 18:07 NVD

7.7 (HIGH) 6.5 (MEDIUM)

Analysis Generated

Jul 17, 2026 - 19:50 vuln.today

CVE Published

Jul 17, 2026 - 19:19 cve.org

HIGH 7.7

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

AnalysisAI

Server-side request forgery in IBM Langflow OSS (versions 1.0.0 through 1.10.0, and Langflow 1.9.0) allows an authenticated low-privileged user to coerce the server into making attacker-controlled outbound requests, reaching internal services and exfiltrating their responses. The flaw stems from an insecure default configuration combined with incomplete enforcement of the built-in SSRF protection, meaning the safeguard can be bypassed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though a vendor patch is available.