CVE-2026-9081 is a Server-Side Request Forgery (SSRF) vulnerability affecting IBM Langflow OSS versions 1.0.0 through 1.10.3. The vulnerability exists in the validate_model_provider_key() function for the Ollama provider, where the user-supplied OLLAMA_BASE_URL parameter is passed directly to the requests.get() method without any validation, scheme or host allowlisting, or filtering of private IP ranges such as loopback, RFC1918, or link-local addresses. This lack of input validation could allow an attacker to induce the server to make HTTP requests to arbitrary internal or external resources.

The vulnerability allows an attacker with at least low privileges (PR:L) to cause the server to make HTTP requests to arbitrary URLs, potentially accessing internal network resources or services not otherwise accessible. The CVSS score of 7.1 indicates high severity with high confidentiality impact, partial integrity impact, and no availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid exposing the vulnerable function to untrusted input or implement manual validation and filtering of the OLLAMA_BASE_URL parameter to restrict requests to trusted hosts and prevent access to private IP ranges.