{"data":{"id":"565cf3d0-4847-4208-a598-f2a4f6d32d5c","title":"CVE-2026-3341: IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may…","summary":"IBM Langflow Desktop versions 1.0.0 through 1.9.2 are affected by CVE-2026-3341, a server-side request forgery (SSRF) flaw classified as CWE-918. An authenticated attacker can send unauthorized requests from the system, which may allow network enumeration or facilitate other attacks. NVD has not yet provided an assessment, and the CVE was published 06/11/2026.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-3341","publishedAt":"2026-06-11T16:16:22.770Z","cveId":"CVE-2026-3341","cweIds":["CWE-918"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow Desktop","Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow Desktop server-side request forgery (SSRF)","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00138,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-wvfv-3qjh-qwxj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:41.259Z","patchAvailable":null,"disclosureDate":"2026-06-11T16:16:22.770Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}