Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code…
Affects: Langflow
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to…
Affects: Langflow
Flowise: An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the…
Affects: Flowise
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Affects: Open WebUI
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
Affects: Open WebUI
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node…
Affects: n8n
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Affects: Open WebUI
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
Affects: Open WebUI
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
Affects: Open WebUI
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Affects: Open WebUI
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base…
Affects: Open WebUI
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
Affects: Open WebUI
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
Affects: Open WebUI
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding…
Affects: Open WebUI
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
Affects: Open WebUI
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector…
Affects: Open WebUI
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Affects: Open WebUI
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Affects: Open WebUI
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Affects: Open WebUI
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Affects: Open WebUI
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
Affects: Open WebUI
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Affects: Open WebUI
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affects: n8n
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git…
Affects: n8n
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
Affects: n8n
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Affects: n8n
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role…
Affects: n8n
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affects: n8n
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code…
Affects: n8n
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affects: n8n
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to…
Affects: n8n
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affects: n8n
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affects: n8n
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affects: n8n
n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
Affects: n8n
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
Affects: n8n
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Affects: n8n
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow