Skip to content
Langflow Desktop vulnerabilities
-
ibm langflow desktop, langflow desktop +1 more
IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
CVE-2026-3341
5.4 Medium
-
ibm langflow desktop, langflow desktop +1 more
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
CVE-2026-6543
8.8 High
-
ibm langflow desktop, langflow desktop +1 more
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
CVE-2026-3345
6.5 Medium
-
ibm langflow desktop, langflow desktop +1 more
Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
CVE-2026-3346
6.4 Medium
-
ibm langflow desktop, langflow desktop +1 more
Server-Side Request Forgery (SSRF) in Langflow URL Component
CVE-2026-3340
6.5 Medium
-
ibm langflow desktop, langflow desktop +1 more
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
CVE-2026-4502
6.5 Medium
-
ibm langflow desktop, langflow desktop +1 more
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
CVE-2026-4503
7.5 High