https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:35:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-339759 EUVD-2026-339759 https://cve.radiocsirt.org/vuln/euvd-2026-339759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8505 <p>IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow&#39;s webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow&#39;s UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).</p> <p>IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow&#39;s webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow&#39;s UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8505 https://cve.radiocsirt.org/vuln/ghsa-9cc5-j3qq-69gv <p>IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow&#39;s webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow&#39;s UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).</p> <p>IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow&#39;s webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow&#39;s UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).</p> https://cve.radiocsirt.org/vuln/ghsa-9cc5-j3qq-69gv https://cve.radiocsirt.org/vuln/ncsc-2026-0251 NCSC-2026-0251 https://cve.radiocsirt.org/vuln/ncsc-2026-0251 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2410 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop OSS ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop OSS ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2410