CVE-2026-104310 — Vulnerability intelligence

langflow — langflow

Published: 2026-10-29T16:17:43.277

CVSS

4.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability.

Sources

• CVE-2026-104310
• Patch, Vendor Advisory