Known Vulnerabilities for Langflow OSS by IBM
Listed below are 10 of the newest known vulnerabilities associated with "Langflow OSS" by "IBM".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110309 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improp... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110245 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentic... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110244 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to impr... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110200 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to clea... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110196 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110193 json | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the ... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110192 json | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insu... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110190 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker co... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110186 json | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-107366 json | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authentica... | Not Provided | 2026-10-20 | 2026-10-21 |