CVE-2026-104331

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.3

Description An authenticated attacker can perform server-side request forgery (SSRF), which is a flaw that allows a server to be coerced into making requests to an unintended location. This could enable the attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Recommendations Update IBM Langflow OSS to a version later than 1.12.3.