SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-19301

MEDIUM · CVSS 5 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.11.2 are vulnerable to server-side request forgery (SSRF), which could enable a remote authenticated attacker to access sensitive information. Organizations using these versions should prioritize patching to mitigate the risk of data exposure. This vulnerability is particularly relevant for security teams managing IBM Langflow deployments.

CVE
CVE-2026-19301
Severity
MEDIUM
CVSS
5
EPSS
0.29%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-86917 HIGH CVE-2026-86905 MEDIUM CVE-2026-86904 HIGH CVE-2026-86903 MEDIUM CVE-2026-86895 HIGH CVE-2026-86894 HIGH