What’s Vulnerable › Products

IBM Langflow Desktop vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your IBM Langflow Desktop version is affected

Latest IBM Langflow Desktop vulnerabilities

• CVE-2026-3341 — IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services (CVSS 5.4)
• CVE-2026-6543 — Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint (CVSS 8.8)
• CVE-2026-3345 — Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint (CVSS 6.5)
• CVE-2026-4503 — Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint (CVSS 7.5)
• CVE-2026-4502 — Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API (CVSS 6.5)
• CVE-2026-3346 — Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw (CVSS 6.4)
• CVE-2026-3340 — Server-Side Request Forgery (SSRF) in Langflow URL Component (CVSS 6.5)