Known Vulnerabilities for products from Langflow
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Langflow".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110309 json | Not Provided | 2026-10-29 | 2026-10-30 | |
| CVE-2026-110245 json | Not Provided | 2026-10-29 | 2026-10-29 | |
| CVE-2026-110244 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to impr... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110200 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to clea... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110196 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110193 json | Not Provided | 2026-10-29 | 2026-10-30 | |
| CVE-2026-110192 json | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insu... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110190 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker co... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-110186 json | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-107366 json | Not Provided | 2026-10-20 | 2026-10-21 | |
| CVE-2026-107329 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper c... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-107328 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper n... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-107327 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing au... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-107326 json | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper n... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-104339 json | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization ... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-104335 json | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper a... | Not Provided | 2026-10-07 | 2026-10-09 |
| CVE-2026-104334 json | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code... | Not Provided | 2026-10-07 | 2026-10-08 |
| CVE-2026-104331 json | IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated at... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-104328 json | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper n... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-104324 json | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserializ... | Not Provided | 2026-10-29 | 2026-10-30 |