CVE-2026-10564CWE-918

SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

High · published June 30, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-06-30T19:51Z
EPSS history
Timeline
  • 30 JUN 19:51Z
    SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection
    cvelistv5