CVE-2026-10564 is a Server-Side Request Forgery (SSRF) vulnerability affecting IBM Langflow OSS versions 1.0.0 through 1.9.6. The issue arises from the legacy RSSReaderComponent in rss.py and the SearXNG component in searxng.py, which perform HTTP requests to URLs controlled by users without proper validation. This bypasses SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources, including cloud metadata services from AWS, Azure, and GCP, potentially exfiltrating IAM credentials and enumerating internal networks. Additionally, the vulnerability can be triggered through prompt injection in agentic workflows due to exposure of tool_mode=True. IBM Langflow OSS is a cloud-hosted service, and IBM manages remediation on the server side.

The vulnerability allows an authenticated attacker to perform SSRF attacks that can access internal resources, including cloud metadata services for AWS, Azure, and GCP. This can lead to exfiltration of sensitive IAM credentials and internal network enumeration. The impact includes confidentiality loss (high), limited integrity impact (low), and no availability impact. The vulnerability can also be triggered through prompt injection in specific workflows, increasing the attack surface.

IBM Langflow OSS is a cloud-hosted service, and IBM manages remediation server-side. Users should verify with IBM's official advisory for confirmation of patch deployment and any required actions. Since patchAvailable is true and the service is cloud-based, IBM likely has applied the fix. No additional user action may be required unless stated by IBM.