{"data":{"id":"2b2c1821-0fb0-497f-bd3b-ab24454db380","title":"CVE-2026-7754: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure…","summary":"CVE-2026-7754 affects IBM Langflow OSS 1.0.0 through 1.10.0 and Langflow 1.9.0. The flaw allows server-side request forgery (SSRF) because of an insecure default configuration and incomplete enforcement of the SSRF protection mechanism. NVD has not yet provided an assessment, and the record was published 07/17/2026.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7754","publishedAt":"2026-07-17T20:17:29.470Z","cveId":"CVE-2026-7754","cweIds":null,"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow","Langflow 1.9.0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0034,"epssCheckedAt":"2026-11-13T18:11:31.700Z","kevDateAdded":null,"advisoryAliases":["GHSA-7wqc-w7wj-5fm5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T18:10:02.152Z","patchAvailable":null,"disclosureDate":"2026-07-17T20:17:29.470Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null,"fixes":[]}}