https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:16:02.157789+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-32375 cnvd-2026-32375 2026-10-04T15:16:02.161393+00:00 cnvd-2026-32375 https://cve.radiocsirt.org/vuln/euvd-2026-348782 EUVD-2026-348782 2026-10-04T15:16:02.161429+00:00 EUVD-2026-348782 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7658 fkie_cve-2026-7658 2026-10-04T15:16:02.161443+00:00

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.

 https://cve.radiocsirt.org/vuln/ghsa-59wg-6v2q-cr6p GHSA-59wg-6v2q-cr6p 2026-10-04T15:16:02.161473+00:00

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2675 WID-SEC-W-2026-2675 — IBM Langflow Desktop: Mehrere Schwachstellen 2026-10-04T15:16:02.161489+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.