Advisories
Security vulnerabilities, privacy incidents, safety concerns, and policy updates affecting LLMs and AI agents.
Security vulnerabilities, privacy incidents, safety concerns, and policy updates affecting LLMs and AI agents.
3,134 items
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, letting authenticated clients choose which HuggingFace model the server loads. A malicious repository with a pickle weight file can execute Python code under PyTorch below 2.6, or exhaust disk and memory.
IBM Langflow OSS versions 1.0.0 through 1.12.8 are affected by CVE-2026-110186. A remote attacker can exploit improper control of code generation to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.4 are affected by CVE-2026-107329. A remote authenticated attacker could exploit improper control of code generation to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain CVE-2026-107328. The flaw is improper neutralization of code in eval/exec, which could allow a remote authenticated attacker to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.4 are affected by CVE-2026-107327. A remote authenticated attacker can execute arbitrary code because of missing authorization.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain CVE-2026-107326. A remote authenticated attacker can exploit improper neutralization of special elements used in an OS command to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw, tracked as CVE-2026-104339, caused by improper neutralization of special elements used in an OS command. A remote attacker can exploit it to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery (SSRF) flaw, tracked as CVE-2026-104331. An authenticated attacker can make the system send unauthorized requests, which may enable network enumeration or other attacks.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain CVE-2026-104328. A remote authenticated attacker can exploit improper neutralization of special elements used in an OS command to execute arbitrary code.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw that lets a remote authenticated attacker execute arbitrary code. The cause is deserialization of untrusted data, tracked as CVE-2026-104324.
IBM Langflow OSS versions 1.0.0 through 1.12.3 deserialize untrusted data. A remote attacker who can reach the message broker can exploit this to execute arbitrary code on the system.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw tracked as CVE-2026-104316. An authenticated attacker can cancel any victim's running background workflow job with a single HTTP request, because no flow-level permission check is performed. The result is loss of in-progress compute work.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery (SSRF) flaw, tracked as CVE-2026-104315. An authenticated attacker can make the system send unauthorized requests, which may enable network enumeration or other attacks.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain CVE-2026-104314. An authenticated attacker holding a read or share grant on a target flow can retrieve the flow owner's stored third-party credentials in cleartext from the API response.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw that lets an authenticated attacker have the server generate a ZIP archive whose entry paths traverse outside the intended extraction directory. If a victim extracts that archive with a tool that does not sanitize paths, arbitrary file write on the victim's host can result.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery (SSRF) vulnerability, tracked as CVE-2026-104310. A remote authenticated attacker can exploit it to obtain sensitive information.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw where a pathname is not properly limited to a restricted directory. A remote authenticated attacker can exploit it to obtain sensitive information.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw in which special elements used in an OS command are not properly neutralized. A remote authenticated attacker can exploit this to cause a denial of service.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a flaw caused by improper access control. A remote attacker who holds valid credentials can use it to execute arbitrary SQL commands.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery vulnerability. A remote attacker with valid authentication can exploit it to obtain sensitive information.