PT-2026-132203
CVE-2026-102590
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 3.1
7.7
HighMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Langflow OSS versions 1.0.0 through 1.12.3
Description
A server-side request forgery (SSRF) issue allows a remote authenticated attacker to obtain sensitive information. SSRF is a flaw where an attacker can induce the server-side application to make requests to an unintended location.
Recommendations
Update IBM Langflow OSS to a version later than 1.12.3.
Found an issue in the description? Have something to add? Feel free to write us 👾