Description
IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider. The function accepts a user-supplied OLLAMA_BASE_URL parameter and passes it directly to requests.get() without validation, scheme/host allowlisting, or filtering of private IP ranges (loopback, RFC1918, link-local addresses).
Published: 2026-08-05
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows a user to supply an arbitrary URL to an unvalidated input field that is passed directly to an HTTP client. The consequence is that an attacker can force the server to issue requests to any address, potentially exposing internal resources or exfiltrating data. The flaw is identified as CWE‑918.

Affected Systems

IBM Langflow OSS versions 1.0.0 through 1.10.3 are affected. Upgrade to version 1.11.0 or later to eliminate the issue.

Risk and Exploitability

The CVSS score is 7.1, indicating a high severity. EPSS data is not available, and the vulnerability is not included in the CISA KEV catalog. The likely attack vector is an unauthenticated or minimally restricted API call that accepts a target URL; the function does not perform any allow‑list checks for scheme, host, or private IP ranges, making exploitation straightforward once the endpoint is reachable.

Generated by OpenCVE AI on August 5, 2026 at 19:44 UTC.

Remediation

Vendor Solution

IBM recommends upgrading to Langflow OSS 1.11.0 or newer https://github.com/langflow-ai/langflow/releases

OpenCVE Recommended Actions

  • Upgrade Langflow OSS to version 1.11.0 or newer.
  • When upgrade cannot occur immediately, configure the application or upstream firewall to block outbound connections to loopback, RFC1918, and link‑local IP ranges.
  • Restrict the OLLAMA_BASE_URL parameter to a known set of trusted domains or IP addresses through application‑level validation if possible.

Generated by OpenCVE AI on August 5, 2026 at 19:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 05 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider. The function accepts a user-supplied OLLAMA_BASE_URL parameter and passes it directly to requests.get() without validation, scheme/host allowlisting, or filtering of private IP ranges (loopback, RFC1918, link-local addresses).
Title Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.10.3:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N'}

Subscriptions

Ibm Langflow Oss
Langflow Langflow
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-05T18:37:43.777Z

Reserved: 2026-05-20T13:02:41.888Z

Link: CVE-2026-9081

cve-icon Vulnrichment

Updated: 2026-08-05T18:37:24.563Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-05T18:17:16.130

Modified: 2026-08-06T18:16:55.350

Link: CVE-2026-9081

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T20:00:11Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)