Langflow: IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- Record
- CVE-2026-10129
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 30, 2026
- Source last modified
- October 25, 2026
Description
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the follow_redirects parameter and supplying a public URL that redirects to internal/localhost addresses. The vulnerability exists because the application validates only the initial URL but does not re-validate redirect destinations. This allows attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be unreachable when SSRF protection is enabled. Successful exploitation can lead to disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.9.3, in a building block that lets a workflow contact other web services. Someone with a low-level account who is allowed to build workflows can turn on the option to follow redirects and give a public web address that sends the request on to internal addresses, slipping past Langflow's protection. The attacker could then reach internal services, cloud setup services and private network systems, exposing passwords, access tokens, internal data and admin page details. This flaw is rated High.
What to do
- The person who installed or runs Langflow for your organization should act on this. If an IT provider or vendor runs it for you, they are the ones to act.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it once it is available.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 25, 2026 and reviewed before publishing.