https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:13:59.782258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339759 EUVD-2026-339759 2026-10-06T00:13:59.849473+00:00 EUVD-2026-339759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8505 fkie_cve-2026-8505 2026-10-06T00:13:59.849508+00:00

IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).

 https://cve.radiocsirt.org/vuln/ghsa-9cc5-j3qq-69gv Withdrawn: GHSA-9cc5-j3qq-69gv — Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass 2026-10-06T00:13:59.849542+00:00

Withdrawn by the publisher.

Affected: PyPI: langflow

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-cf6m-vc3m-7cgm. This link is maintained to preserve external references.

## Original Description IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).

 https://cve.radiocsirt.org/vuln/ncsc-2026-0251 NCSC-2026-0251 — Kwetsbaarheden verholpen in IBM Langflow OSS 2026-10-06T00:13:59.849581+00:00 NCSC-2026-0251 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2410 WID-SEC-W-2026-2410 — IBM Langflow Desktop OSS: Mehrere Schwachstellen 2026-10-06T00:13:59.849610+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop OSS ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.