{"schema":"vulnpedia.research/1","cve":"CVE-2026-105699","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-08T02:26:48.618Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"nvd","sourceId":"CVE-2026-105699","modified":"2026-10-08T03:16:34.637","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4hmc-cfm3-w43c"}]},{"url":"https://github.com/langflow-ai/langflow/pull/12818","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","url":"https://github.com/langflow-ai/langflow/pull/12818"},{"source":"nvd","sourceId":"CVE-2026-105699","modified":"2026-10-08T03:16:34.637","url":"https://github.com/langflow-ai/langflow/pull/12818"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow/pull/12818"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow/pull/12818"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow/pull/12818"}]},{"url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa"},{"source":"nvd","sourceId":"CVE-2026-105699","modified":"2026-10-08T03:16:34.637","url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow/commit/b8fe970493fd5fb2e1fc71dfccc79f90b76058fa"}]},{"url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032"},{"source":"nvd","sourceId":"CVE-2026-105699","modified":"2026-10-08T03:16:34.637","url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow/commit/f0fd436fe9829192ee550e6cb46961a01dd37032"}]},{"url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:37:59.630Z","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1"},{"source":"nvd","sourceId":"CVE-2026-105699","modified":"2026-10-08T03:16:34.637","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.1"}]},{"url":"https://osv.dev/vulnerability/GHSA-4hmc-cfm3-w43c","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","origins":[{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://osv.dev/vulnerability/GHSA-4hmc-cfm3-w43c"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://osv.dev/vulnerability/GHSA-4hmc-cfm3-w43c"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105699","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","origins":[{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105699"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105699"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105699"}]},{"url":"https://github.com/langflow-ai/langflow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","origins":[{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://github.com/langflow-ai/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/langflow-ai/langflow"},{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://github.com/langflow-ai/langflow"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-4230","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://osv.dev/vulnerability/PYSEC-2026-4230"},{"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4230"}]},{"url":"https://pypi.org/project/langflow","tags":["PACKAGE"],"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://pypi.org/project/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","url":"https://pypi.org/project/langflow"}]},{"url":"https://github.com/advisories/GHSA-4hmc-cfm3-w43c","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://github.com/advisories/GHSA-4hmc-cfm3-w43c"},{"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","url":"https://github.com/advisories/GHSA-4hmc-cfm3-w43c"}]},{"source":"euvd","sourceId":"EUVD-2026-92796","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92796","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92796","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92796"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","url":"https://osv.dev/vulnerability/GHSA-4hmc-cfm3-w43c","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.8"},{"fixed":"1.9.1"}]}],"versions":["1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.0rc5","1.8.0rc6","1.8.1","1.8.2","1.8.3","1.8.3rc0","1.8.4","1.9.0"],"databaseSpecific":{"last_known_affected_version_range":"<= 1.9.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4hmc-cfm3-w43c/GHSA-4hmc-cfm3-w43c.json"},"modified":"2026-10-15T14:56:20.801052430Z","origins":[{"source":"ghsa","sourceId":"GHSA-4hmc-cfm3-w43c","modified":"2026-10-15T14:56:20.801052430Z","url":"https://osv.dev/vulnerability/GHSA-4hmc-cfm3-w43c"}]},{"source":"pysec","sourceId":"PYSEC-2026-4230","url":"https://osv.dev/vulnerability/PYSEC-2026-4230","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.8"},{"fixed":"1.9.1"}]}],"versions":["1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.0rc5","1.8.0rc6","1.8.1","1.8.2","1.8.3","1.8.3rc0","1.8.4","1.9.0"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/langflow/PYSEC-2026-4230.yaml"},"modified":"2026-10-15T14:45:08.145989636Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4230","modified":"2026-10-15T14:45:08.145989636Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4230"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}