Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints.
Published: 2026-09-10
Score: 5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Immediate Patch
AI Analysis

Impact

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by a server‑side request forgery flaw caused by absent egress validation on server‑side URL fetches. The weakness allows a remote authenticated attacker to supply arbitrary URLs that the application will query, potentially exposing internal services, application data, or sensitive external resources. The identified CWE is 918, which categorizes it as a server‑side request forgery vulnerability.

Affected Systems

The vulnerable products are IBM Langflow OSS, specifically releases from 1.0.0 up to and including 1.11.5. Recent updates release protection in version 1.11.6, which should be used where possible.

Risk and Exploitability

The CVSS score of 5 indicates moderate severity. EPSS data is not available CISA's KEV catalogue. Because the flaw requires the attacker to possess valid credentials to supply the malicious URL, the attack vector is limited to authenticated users but still enables endpoints.

Generated by OpenCVE AI on September 11, 2026 at 04:03 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.6 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

  • Upgrade IBM Langflow OSS to version 1.11.6 or later from PyPI; this resolves the SSRF vulnerability.
  • If an upgrade is not immediately possible, block or restrict outbound network calls from Langflow by configuring a reverse proxy or firewall to allow only attacker from reaching internal services.
  • Restrict access to any functionality that performs external URL fetches to users with the highest trust level, and enforce multi‑factor authentication for privileged accounts to limit exploitation opportunities.

Generated by OpenCVE AI on September 11, 2026 at 04:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoints.
Title Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N'}

Subscriptions

Ibm Langflow Oss
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-11T13:46:24.044Z

Reserved: 2026-08-25T13:46:33.702Z

Link: CVE-2026-79723

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-10T22:17:00.387

Modified: 2026-09-10T22:17:00.387

Link: CVE-2026-79723

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-11T07:15:16Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)