CVE-2026-105741
2 advisories.
PyPI/langflow CVE-2026-105741: high 7.1, EPSS 0.21%
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Action: Upgrade langflow to 1.10.3 or later.
pip install langflow==1.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.10.3 | - |
Fixed versions
| 1.10.3 |
Sources
- osv: GHSA-4f6c-2vvp-gw82
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82
- https://nvd.nist.gov/vuln/detail/CVE-2026-105741
- https://github.com/langflow-ai/langflow/pull/13915
- https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72
- https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/releases/tag/v1.10.3
CVE-2026-105741 · published · modified · JSON
PyPI/langflow CVE-2026-105741: high 7.1, EPSS 0.21%
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Action: Upgrade langflow to 1.10.3 or later.
pip install langflow==1.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.10.3 | - |
Fixed versions
| 1.10.3 |
Sources
- osv: PYSEC-2026-4229
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82
- https://nvd.nist.gov/vuln/detail/CVE-2026-105741
- https://github.com/langflow-ai/langflow/pull/13915
- https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72
- https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/releases/tag/v1.10.3
- https://pypi.org/project/langflow
- https://github.com/advisories/GHSA-4f6c-2vvp-gw82
CVE-2026-105741 · published · modified · JSON