Langflow Desktop (Ibm) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-06-11. Vendor: Ibm.
CVEs of Langflow Desktop
- CVE-2026-3341 - CVSS 5.4 (medium), 2026-06-11: IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send…
- CVE-2026-6543 - CVSS 8.8 (high), 2026-04-30: IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This…
- CVE-2026-3345 - CVSS 6.5 (medium), 2026-04-30: IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL…
- CVE-2026-4502 - CVSS 6.5 (medium), 2026-04-30: IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a…
- CVE-2026-4503 - CVSS 7.5 (high), 2026-04-30: IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through…
- CVE-2026-3346 - CVSS 6.4 (medium), 2026-04-30: IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed…
- CVE-2026-3340 - CVSS 6.5 (medium), 2026-04-30: IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send…
- CVE-2026-3357 - CVSS 8.8 (high), 2026-04-08: IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default…
