CVE-2026-81265

Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

View on CVE.org
Published Sep 10, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
IBM Langflow OSS 1.0.0 through 1.11.5.

Analysis

AI-generated

Technical impact

IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a server‑side request forgery flaw. The application accepts arbitrary URLs for server‑side fetches without validating the target, allowing an attacker to make the server contact arbitrary hosts. This can lead to internal network probing, data exfiltration. The vulnerability is classified as SSRF and can threaten confidentiality and integrity of internal resources.

Affected Systems

The issue affects IBM's Langflow OSS building tool. Any installation of Langflow OSS version 1.0.0 through 1.11.5 is vulnerable. The fix is available in 1.11.6.

Risk and Exploitability

The combined CVSS score is 7.5, indicating a high impact. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, so current exploitation probability is unknown. The flaw can be exploited via the application's URL fetch functionality over HTTP or HTTPS. An attacker who can supply a crafted URL can cause the server to reach internal endpoints and may harvest sensitive data or trigger actions in services that the server can access. The likely attack vector is through any interface that permits arbitrary URL input.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.6 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

  • Upgrade Langflow OSS to version 1.11.6 or later, which removes the SSRF flaw.
  • If upgrading immediately is not possible, restrict the outbound network connections from the host running Langflow OSS using firewall rules or network policy to limit access to trusted endpoints.
  • Ensure that any public or admin‑facing APIs that accept URLs are further validated or sanitized to prevent malicious target selection.

Generated by OpenCVE AI on September 11, 2026 at 04:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Langflow
Langflow langflow
CPEs cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Vendors & Products Langflow
Langflow langflow
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.11.5.
Title Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}
Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)

Sources

Status
PUBLISHED
Assigner
ibm
Published
Updated
Sep 11, 2026, 2:41 PM
Reserved
Aug 26, 2026, 5:07 PM

View source JSON

Updated
Sep 11, 2026, 2:41 PM

JSON

Status
Analyzed
Published
Sep 10, 2026, 10:17 PM
Modified
Sep 16, 2026, 12:57 AM

View source JSON

No data.

Updated
Sep 11, 2026, 6:45 AM

JSON