IBM Langflow Desktop vulnerabilities
8 published CVEs name IBM Langflow Desktop among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-3341
IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
IBM · Langflow Desktop
Medium5.4 - CVE-2026-6543
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
IBM · Langflow Desktop
High8.8 - CVE-2026-3345
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
IBM · Langflow Desktop
Medium6.5 - CVE-2026-3346
Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
IBM · Langflow Desktop
Medium6.4 - CVE-2026-3340
Server-Side Request Forgery (SSRF) in Langflow URL Component
IBM · Langflow Desktop
Medium6.5 - CVE-2026-4502
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
IBM · Langflow Desktop
Medium6.5 - CVE-2026-4503
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
IBM · Langflow Desktop
High7.5 - CVE-2026-3357
IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
IBM · Langflow Desktop
High8.8