VulnWatch VulnWatch
← Back to dashboard
Medium nvd · CVE-2026-12767

CVE-2026-12767: IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthentic

Published Sep 14, 2026 CVSS 6.5

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected AI Products

langflow
Get the weekly digest. Every Monday: top AI security stories of the week. Free.