CVE-2026-10129
Received Received - Intake

SSRF Protection Bypass in IBM Langflow OSS

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: IBM Corporation

Description
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the follow_redirects parameter and supplying a public URL that redirects to internal/localhost addresses. The vulnerability exists because the application validates only the initial URL but does not re-validate redirect destinations. This allows attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be unreachable when SSRF protection is enabled. Successful exploitation can lead to disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-30
Last Modified
2026-06-30
Generated
2026-07-01
AI Q&A
2026-06-30
EPSS Evaluated
N/A
NVD
CVE-2026-10129
EUVD
EUVD-2026-40405

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm langflow_oss From 1.0.0 (inc) to 1.9.3 (inc)
ibm langflow From 1.0.0 (inc) to 1.9.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-10129 is a Server-Side Request Forgery (SSRF) protection bypass vulnerability found in IBM Langflow OSS versions 1.0.0 through 1.9.3, specifically in the API Request component.

An authenticated attacker with low-level privileges (flow author role) can exploit this vulnerability by enabling the follow_redirects parameter and providing a public URL that redirects to internal or localhost addresses.

The root cause is that the application only validates the initial URL but does not re-validate the redirect destinations, allowing attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should normally be protected by SSRF protections.

Successful exploitation can lead to disclosure of sensitive information such as credentials, tokens, internal API responses, and administrative panel data.

Impact Analysis

This vulnerability can have serious impacts including unauthorized access to internal network resources and sensitive information disclosure.

  • Attackers can bypass SSRF protections to reach internal HTTP services and localhost endpoints.
  • Access to cloud metadata services and private network resources can be gained.
  • Sensitive data such as credentials, tokens, internal API responses, and administrative panel data may be exposed.

Overall, this can lead to compromised system integrity and confidentiality, potentially allowing further attacks or unauthorized control.

Mitigation Strategies

IBM strongly recommends upgrading Langflow OSS to version 1.10.0 to address this issue.

No workarounds or mitigations are currently available.

Compliance Impact

The vulnerability allows disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data by bypassing SSRF protections. Such unauthorized disclosure of sensitive data can negatively impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of personal and sensitive information.

Because the vulnerability enables access to internal and private network resources that should be protected, it increases the risk of data breaches and unauthorized data exposure, potentially leading to violations of data protection and privacy regulations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10129. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart