CVE-2026-19301
Received Received - Intake

IBM Langflow OSS Server-Side Request Forgery

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: IBM Corporation

Description
IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-19301

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm langflow From 1.0.0 (inc) to 1.11.2 (inc)
ibm langflow 1.11.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) in IBM Langflow OSS versions 1.0.0 through 1.11.2. It allows a remote authenticated attacker to send crafted requests from the server to internal systems or databases by bypassing URL validation mechanisms. The issue stems from insufficient validation in components like model discovery tools and database connectors, enabling access to private network hosts or cloud metadata endpoints.

Detection Guidance

Detecting SSRF vulnerabilities like CVE-2026-19301 requires monitoring network traffic and application logs for unusual outbound requests. Check for requests to internal IP ranges (e.g., 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) or cloud metadata endpoints (e.g., 169.254.169.254). Inspect logs for URLs containing private addresses or bypass attempts in components like LMStudio, OpenAI model discovery, or SQL connectors.

Impact Analysis

An attacker could exploit this to probe internal network services, read sensitive data from internal databases, or access cloud metadata endpoints. This may lead to unauthorized information disclosure, data breaches, or further network infiltration if internal systems are not properly secured.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations may face compliance violations, legal penalties, or reputational damage if exploited.

Mitigation Strategies

Upgrade Langflow OSS to version 1.11.3 or later immediately to address the SSRF vulnerability. If upgrading is not possible, restrict network access to the Langflow server, block outbound connections to internal IPs, and monitor for suspicious activity. Disable or audit components like SQL Database connectors and model discovery tools until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19301. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart