p PatchFirst

CVE-2026-104331

CVE-2026-104331 · Langflow OSS is affected by multiple vulnerabilities

This page contains facts from public vulnerability sources. Check the original advisory before updating.

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

CVSS 5.4 · Medium · EPSS 0.2%

Published
Updated

Affected products and versions

  • langflow oss

    Versions
    • ≥ 1.0.0, ≤ 1.12.3: Affected (semver)

    No fix published

Original sources

Check your server →