Verified

ghsa:GHSA-J8F7-X8JM-WMM4: langflow < 1.10.3; +3 more affected products

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling). Affected range: < 1.10.3. Fixed version: 1.10.3. Affected range: < 0.10.3. Fixed version: 0.10.3. Affected range: < 1.10.3. Fixed version: 1.10.3. Affected range: < 0.1.2. Fixed version: 0.1.2.

Affected technology

langflow · < 1.10.3
Vendor not specified by the source

langflow-base · < 0.10.3
Vendor not specified by the source

lfx · < 1.10.3
Vendor not specified by the source

lfx-docling · < 0.1.2
Vendor not specified by the source

Component: output

What an attacker can do

So a self-hosted user can reach a local service on `localhost`.

Published 12-Oct-2026 10:22 UTC

Product: langflow
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-06 17:57:05.567630+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-j8f7-x8jm-wmm4.html