CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.11.1 are susceptible to server-side request forgery (SSRF), enabling authenticated attackers to issue unauthorized requests from the server. This vulnerability could lead to network enumeration and may facilitate further attacks on the internal network. Organizations using affected versions should prioritize remediation to mitigate potential security risks.
CVE
CVE-2026-18545
Severity
MEDIUM
CVSS
4.3
EPSS
0.22%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)