High severity7.7NVD Advisory· Published Jul 17, 2026· Updated Jul 21, 2026

CVE-2026-7754

Description

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

Affected products

IBM/Langflow OSSllm-fuzzy
Range: 1.0.0 - 1.10.0, 1.9.0
Langflow AI/Langflow
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Range: >=1.0.0,<1.10.1

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7278930nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000