{"data":{"id":"011e0e02-5bd7-4148-9208-d808d8f78257","title":"CVE-2026-12766: IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat","summary":"IBM Langflow OSS versions 1.0.0 through 1.11.2 contain a server-side request forgery vulnerability (SSRF, a flaw where an attacker tricks the server into making unwanted network requests). An authenticated attacker (someone with valid login credentials) could exploit this to send unauthorized requests from the system, potentially discovering network information or launching further attacks.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12766","publishedAt":"2026-09-14T21:17:00.713Z","cveId":"CVE-2026-12766","cweIds":["CWE-918"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-14T21:17:00.713Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}