CVE-2026-12767

Langflow exposes a second unauthenticated server-side request flaw

IBM / Langflow · Langflow OSS

First documented disclosure · Review checkpoint

Summary

An unauthenticated caller can cause a vulnerable Langflow server to send an unauthorized network request.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed IBM bulletin and CNA record do not document malicious exploitation or an affected customer.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The flaw allows an outbound request from the server to a destination chosen by a remote caller. IBM does not specify the route for this exact ID.

Conditions required

Network access to the vulnerable Langflow surface and a destination reachable from the service. IBM lists no login requirement.

Potential impact

Potential probing of network resources and use of the server to reach otherwise inaccessible services.

Affected versions and configurations

1.0.0 through 1.11.5, inclusive, according to IBM.

Fix and mitigation status

1.11.6 addresses this issue according to IBM.

Practical next steps

Upgrade to a supported release containing the 1.11.6 fix. Restrict egress to approved destinations and audit requests from public endpoints.

Operating lesson

Retest endpoints on each maintained branch because related SSRF flaws have different fix versions.

Evidence and limits

IBM groups this CVE with other endpoint-validation findings. Its own entry describes an unauthenticated issue through 1.11.5. A specific provider, URL parser, response leak or attacker identity is not established.

Sources