Threats Tagged 'cve-2026-18545'

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system. This may enable network enumeration or assist in launching further attacks. The vulnerability has a CVSS score of 4.3, indicating medium severity. No official patch or remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system. This may enable network enumeration or assist in other attacks. The vulnerability has a medium severity rating with a CVSS score of 4.3. No official patch or remediation guidance has been provided by the vendor at this time.

Multiple vulnerabilities have been identified in Langflow OSS, an open-source visual interface for creating LLM-based applications. The issues relate to authentication weaknesses (CWE-287). The affected versions include all Langflow OSS versions prior to 1.11.2. No official patch or remediation has been confirmed yet. The severity of these vulnerabilities is assessed as high based on available data. There are no known exploits in the wild at this time. The vendor has not provided specific remediation guidance or patches. Users should monitor vendor advisories for updates and apply fixes once available.