CVE-2026-10546— DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0≤ 1.9.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10546
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Time-of-Check/Time-of-Use (TOCTOU) race condition that can be exploited via DNS rebinding.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
服务端请求伪造(SSRF)
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Langflow OSS 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Langflow OSS是美国IBM公司的一个开源的低代码可视化AI工作流构建工具，它让开发者能通过拖拽组件的方式快速搭建、部署和迭代AI智能体与RAG应用，同时支持用Python进行深度定制以集成企业系统。 IBM Langflow OSS 1.0.0版本至1.9.3版本存在服务端请求伪造漏洞，该漏洞源于URL组件中的Time-of-Check/Time-of-Use（TOCTOU）竞争条件，可通过DNS重新绑定利用，导致服务端请求伪造（SSRF）攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 ~ 1.9.3 | cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-10546
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10546
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-10546 (1)
Same Patch Batch · IBM · 2026-06-30 · 43 CVEs total
| CVE-2026-10134 | 10.0 CRITICAL | Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows |
| CVE-2026-7873 | 9.9 CRITICAL | Code Injection Vulnerability in Code Validation Endpoint |
| CVE-2026-7803 | 9.8 CRITICAL | Flow Validation Bypass via Empty Component Type Field |
| CVE-2026-10109 | 9.8 CRITICAL | IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake h |
| CVE-2026-7871 | 9.8 CRITICAL | Insecure Deserialization in Redis Cache Backend |
| CVE-2026-10140 | 9.6 CRITICAL | Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem |
| CVE-2026-11708 | 9.3 CRITICAL | IBM WebSphere Application Server is affected by a cross-site scripting vulnerability |
| CVE-2026-11712 | 9.3 CRITICAL | IBM WebSphere Application Server is affected by a cross-site scripting vulnerability |
| CVE-2026-7874 | 9.1 CRITICAL | Weak Cryptographic Key Derivation Exposed All Stored Credentials |
| CVE-2026-7663 | 9.1 CRITICAL | Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport |
| CVE-2026-11714 | 8.5 HIGH | IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerabil |
| CVE-2026-10129 | 8.5 HIGH | SSRF via HTTP Redirect Following in Langflow API Request Component |
| CVE-2026-11594 | 8.5 HIGH | IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilit |
| CVE-2026-10564 | 8.2 HIGH | SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection |
| CVE-2026-10560 | 8.2 HIGH | Unauthenticated Access to Private Flow Build Events and Cancellation in Langflow OSS |
| CVE-2025-36359 | 8.1 HIGH | IBM DevOps Loop is susceptible to an Insufficient Session Expiration vulnerability. |
| CVE-2026-13449 | 7.6 HIGH | XXE attack in IBM Business Automation Manager Open Editions |
| CVE-2026-13759 | 7.5 HIGH | IBM WebSphere eXtreme Scale is affected by Insecure Deserilization |
| CVE-2026-13772 | 7.5 HIGH | IBM WebSphere eXtreme Scale's OQL is affected by remote code execution |
| CVE-2026-11541 | 7.4 HIGH | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Langflow OSS
- CVE-2026-10129
SSRF via HTTP Redirect Following in Langflow API Request Com - CVE-2026-10134
Unauthenticated Server-Side RCE via PythonCodeStructuredTool - CVE-2026-10140
Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voi - CVE-2026-10560
Unauthenticated Access to Private Flow Build Events and Canc - CVE-2026-10564
SSRF Vulnerability in Langflow OSS Legacy Components Bypasse
Same vendor: IBM
- CVE-2026-9074
IBM API Connect SQL Injection - CVE-2026-3144
IBM API Connect Default Credentials - CVE-2026-11541
IBM WebSphere Application Server and WebSphere Application S - CVE-2026-11594
IBM WebSphere Application Server is affected by multiple cro - CVE-2025-12530
Vulnerabilities found in Watson Data Intelligence
Same weakness: CWE-918
- CVE-2026-15619
mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side - CVE-2026-62197
OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery - CVE-2026-62242
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated In - CVE-2026-62240
CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scra - CVE-2026-49969
Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handl
V. Comments for CVE-2026-10546
No comments yet