PT-2026-60859

CVE-2026-7754

·

Published

2026-07-17

·

Updated

2026-07-21

Description by

CVSS 3.1
7.7
High
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0
Description An issue exists due to insecure default configuration and incomplete enforcement of the server-side request forgery (SSRF) protection mechanism. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.
Recommendations Update IBM Langflow OSS to a version later than 1.10.0.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2026-7754
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com