中
5.4
Langflow OSS is affected by multiple vulnerabilities
CVE-2026-104331
SecPulse初出
概要
IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| IBM | Langflow OSS |
1.0.0 〜 1.12.3 |
— |
参照URL
- web psirt@us.ibm.com