DeutschShown in its original language — a full translation is planned for a future version.
IBM Langflow Desktop OSS: Mehrere Schwachstellen
view advisory published 2026-07-19
Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop OSS ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8859US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component… | ||||
| CVE-2026-8635US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and a… | ||||
| CVE-2026-8505US | —OT elevated | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system i… | ||||
| CVE-2026-8481US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts us… | ||||
| CVE-2026-8476US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pick… | ||||
| CVE-2026-8056US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filtering… | ||||
| CVE-2026-7872US | high8.1 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user. | ||||
| CVE-2026-7755US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files. | ||||
| CVE-2026-7754US | medium6.5 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF pro… | ||||
| CVE-2026-7667US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Di… | ||||
| CVE-2026-9135US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies compone… | ||||
| CVE-2026-9103US | —OT elevated | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoin… | ||||
| CVE-2026-9202US | —OT elevated | — | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployme… | ||||
| CVE-2026-9198US | —OT critical | KEV | ||
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (execut… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-2410 - CSAF Versionself
- WID-SEC-2026-2410 - Portal Versionself
- IBM Security Bulletin vom 2026-07-19external
- IBM Security Bulletin vom 2026-07-19external
- IBM Security Bulletin vom 2026-07-19external
- IBM Security Bulletin vom 2026-07-19external
- IBM Security Bulletin vom 2026-07-19external
- IBM Security Bulletin vom 2026-07-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan