GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    WID-SEC-W-2026-3239

    Vulnerability from csaf_certbund - Published: 2026-09-08 22:00 - Updated: 2026-09-10 22:00
    Summary
    Langflow OSS: Mehrere Schwachstellen
    Severity
    Hoch
    Notes
    Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
    Produktbeschreibung: Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.
    Angriff: Ein Angreifer kann mehrere Schwachstellen in Langflow OSS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erweiterte Berechtigungen zu erlangen oder sensible Informationen offenzulegen.
    Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows
    CVE-2026-12763
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-12767
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-76059
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-78569
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-78571
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-78575
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-79723
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-79724
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-79725
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-79742
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81204
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81211
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81213
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81265
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81268
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81940
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-81941
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-85025
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-9225
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-9596
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    Open Source Langflow OSS <1.11.6
    Open Source / Langflow
    		 OSS <1.11.6
    CVE-2026-84889
    Affected products
    Product Identifier Version Remediation
    Open Source Langflow OSS <1.11.0
    Open Source / Langflow
    		 OSS <1.11.0
    References
    To clipboard 

    {
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Langflow OSS ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu manipulieren, erweiterte Berechtigungen zu erlangen oder sensible Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-3239 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3239.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-3239 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3239"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7286656 vom 2026-09-08",
        "url": "https://www.ibm.com/support/pages/node/7286656"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7286657 vom 2026-09-08",
        "url": "https://www.ibm.com/support/pages/node/7286657"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7286662 vom 2026-09-08",
        "url": "https://www.ibm.com/support/pages/node/7286662"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7286665 vom 2026-09-08",
        "url": "https://www.ibm.com/support/pages/node/7286665"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7286666 vom 2026-09-08",
        "url": "https://www.ibm.com/support/pages/node/7286666"
      }
    ],
    "source_lang": "en-US",
    "title": "Langflow OSS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-09-10T22:00:00.000+00:00",
      "generator": {
        "date": "2026-09-11T09:13:17.601+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-3239",
      "initial_release_date": "2026-09-08T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-09-08T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-09-10T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2026-75793, EUVD-2026-75792, EUVD-2026-75784, EUVD-2026-75781, EUVD-2026-75780, EUVD-2026-75779, EUVD-2026-75778, EUVD-2026-75777, EUVD-2026-75771, EUVD-2026-75761, EUVD-2026-75748, EUVD-2026-75723, EUVD-2026-75800, EUVD-2026-75799, EUVD-2026-75796, EUVD-2026-75795, EUVD-2026-75794, EUVD-2026-75801"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "OSS \u003c1.11.0",
                "product": {
                  "name": "Open Source Langflow OSS \u003c1.11.0",
                  "product_id": "T059210"
                }
              },
              {
                "category": "product_version",
                "name": "OSS 1.11.0",
                "product": {
                  "name": "Open Source Langflow OSS 1.11.0",
                  "product_id": "T059210-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:langflow:langflow:oss__1.11.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "OSS \u003c1.11.6",
                "product": {
                  "name": "Open Source Langflow OSS \u003c1.11.6",
                  "product_id": "T059211"
                }
              },
              {
                "category": "product_version",
                "name": "OSS 1.11.6",
                "product": {
                  "name": "Open Source Langflow OSS 1.11.6",
                  "product_id": "T059211-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:langflow:langflow:oss__1.11.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Langflow"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12763",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-12763"
    },
    {
      "cve": "CVE-2026-12767",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-12767"
    },
    {
      "cve": "CVE-2026-76059",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-76059"
    },
    {
      "cve": "CVE-2026-78569",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-78569"
    },
    {
      "cve": "CVE-2026-78571",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-78571"
    },
    {
      "cve": "CVE-2026-78575",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-78575"
    },
    {
      "cve": "CVE-2026-79723",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-79723"
    },
    {
      "cve": "CVE-2026-79724",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-79724"
    },
    {
      "cve": "CVE-2026-79725",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-79725"
    },
    {
      "cve": "CVE-2026-79742",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-79742"
    },
    {
      "cve": "CVE-2026-81204",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81204"
    },
    {
      "cve": "CVE-2026-81211",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81211"
    },
    {
      "cve": "CVE-2026-81213",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81213"
    },
    {
      "cve": "CVE-2026-81265",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81265"
    },
    {
      "cve": "CVE-2026-81268",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81268"
    },
    {
      "cve": "CVE-2026-81940",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81940"
    },
    {
      "cve": "CVE-2026-81941",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-81941"
    },
    {
      "cve": "CVE-2026-85025",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-85025"
    },
    {
      "cve": "CVE-2026-9225",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-9225"
    },
    {
      "cve": "CVE-2026-9596",
      "product_status": {
        "known_affected": [
          "T059210",
          "T059211"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-9596"
    },
    {
      "cve": "CVE-2026-84889",
      "product_status": {
        "known_affected": [
          "T059210"
        ]
      },
      "release_date": "2026-09-08T22:00:00.000+00:00",
      "title": "CVE-2026-84889"
    }
  ]
}