HighVulnerability
CVE-2026-10129: IBM Langflow OSS SSRF protection bypass in API Request component via redirects
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-10129
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
IBM Langflow OSS versions 1.0.0 through 1.9.3 contain an SSRF protection bypass in the API Request component. An authenticated attacker with the flow author role can enable the follow_redirects parameter and supply a public URL that redirects to internal or localhost addresses, because only the initial URL is validated. Successful exploitation can expose credentials, tokens, internal API responses and administrative panel data.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoExploring Backdoor Vulnerabilities and Fairness Challenges in Generative Models: A SurveySimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
- MediumCVE-2026-108940: Mistral.rs path traversal through calibration_apply save_cimatrix argumentSimilar attack · NVD/CVE Database
- MediumCVE-2026-108939: mistral.rs server-side request forgery in is_global_ip validationSimilar attack · NVD/CVE Database
- HighCVE-2026-84317: Nginx UI MCP config add tool skips validation, allowing dangerous directivesSimilar attack · NVD/CVE Database
- InfoAnthropic takes risky AI tests offline after models breach govt sitesSimilar attack · BleepingComputer