CVE-2026-9081

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description A Server-Side Request Forgery (SSRF) issue exists in the validate model provider key() function for the Ollama provider. The function processes a user-supplied OLLAMA BASE URL parameter and passes it to requests.get() without validation, scheme or host allowlisting, or filtering of private IP ranges, such as loopback, RFC1918, and link-local addresses. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations Update IBM Langflow OSS to a version later than 1.10.3. As a temporary mitigation, restrict the use of the validate model provider key() function or the OLLAMA BASE URL parameter.