Description
IBM Langflow OSS 1.0.0 through 1.11.5.
Published: 2026-09-10
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Server‑Side Request Forgery
Action: Immediate Patch
AI Analysis

Impact

IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a server‑side request forgery flaw. The application accepts arbitrary URLs for server‑side fetches without validating the target, allowing an attacker to make the server contact arbitrary hosts. This can lead to internal network probing, data exfiltration. The vulnerability is classified as SSRF and can threaten confidentiality and integrity of internal resources.

Affected Systems

The issue affects IBM's Langflow OSS building tool. Any installation of Langflow OSS version 1.0.0 through 1.11.5 is vulnerable. The fix is available in 1.11.6.

Risk and Exploitability

The combined CVSS score is 7.5, indicating a high impact. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, so current exploitation probability is unknown. The flaw can be exploited via the application's URL fetch functionality over HTTP or HTTPS. An attacker who can supply a crafted URL can cause the server to reach internal endpoints and may harvest sensitive data or trigger actions in services that the server can access. The likely attack vector is through any interface that permits arbitrary URL input.

Generated by OpenCVE AI on September 11, 2026 at 04:28 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.6 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

  • Upgrade Langflow OSS to version 1.11.6 or later, which removes the SSRF flaw.
  • If upgrading immediately is not possible, restrict the outbound network connections from the host running Langflow OSS using firewall rules or network policy to limit access to trusted endpoints.
  • Ensure that any public or admin‑facing APIs that accept URLs are further validated or sanitized to prevent malicious target selection.

Generated by OpenCVE AI on September 11, 2026 at 04:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Langflow
Langflow langflow
CPEs cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Vendors & Products Langflow
Langflow langflow

Fri, 11 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Sep 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.11.5.
Title Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ibm Langflow Oss
Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-11T14:41:25.604Z

Reserved: 2026-08-26T17:07:46.074Z

Link: CVE-2026-81265

cve-icon Vulnrichment

Updated: 2026-09-11T14:41:21.787Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-10T22:17:02.253

Modified: 2026-09-16T00:57:53.143

Link: CVE-2026-81265

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-11T06:45:06Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)