DeutschShown in its original language — a full translation is planned for a future version.
IBM Langflow Desktop: Mehrere Schwachstellen
view advisory published 2026-08-05
Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.
01
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-9205US | critical9.8 | — | ||
IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. | ||||
| CVE-2026-9201US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism.… | ||||
| CVE-2026-9196US | high8.8 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated… | ||||
| CVE-2026-9130US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via… | ||||
| CVE-2026-8478US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. | ||||
| CVE-2026-8470US | critical9.1OT elevated | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encry… | ||||
| CVE-2026-8183US | high7.7 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacke… | ||||
| CVE-2026-8182US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests. | ||||
| CVE-2026-7869US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge base… | ||||
| CVE-2026-7658US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enabl… | ||||
| CVE-2026-17633US | high8.8 | Exploit | ||
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection. | ||||
| CVE-2026-17632US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scan… | ||||
| CVE-2026-17624US | high8.8 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could… | ||||
| CVE-2026-10547US | high8.1 | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to injec… | ||||
| CVE-2026-9081US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ol… | ||||
| CVE-2026-7657US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement. | ||||
| CVE-2026-10128US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secret… | ||||
| CVE-2026-17629US | — | — | ||
| CVE-2026-8506US | — | — | ||
| CVE-2026-9131US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-2675 - CSAF Versionself
- WID-SEC-2026-2675 - Portal Versionself
- IBM Security Bulletin 7282646 vom 2026-08-05external
- IBM Security Bulletin 7282647 vom 2026-08-05external
- IBM Security Bulletin 7282648 vom 2026-08-05external
- IBM Security Bulletin 7282649 vom 2026-08-05external
- IBM Security Bulletin 7282650 vom 2026-08-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan