CVE-2026-8447 PUBLISHED

Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust

Assigner: ibm
Reserved: 12.05.2026 Published: 04.09.2026 Updated: 04.09.2026

IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat interface.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS Score: 6.1

Product Status

Vendor IBM
Product Langflow OSS
Versions
  • affected from 1.0.0 to 1.11.2 (incl.)

Solutions

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.3 https://pypi.org/project/langflow/

Credits

  • odgrso GMO CyberSecurity by Ierae inc, Edward-x (YLChen-007) finder

References

Problem Types

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE