{"schema":"vulnpedia.research/1","cve":"CVE-2026-105741","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-06T16:43:02.046Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"nvd","sourceId":"CVE-2026-105741","modified":"2026-10-06T17:17:18.810","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82"}]},{"url":"https://github.com/langflow-ai/langflow/pull/13915","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","url":"https://github.com/langflow-ai/langflow/pull/13915"},{"source":"nvd","sourceId":"CVE-2026-105741","modified":"2026-10-06T17:17:18.810","url":"https://github.com/langflow-ai/langflow/pull/13915"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow/pull/13915"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow/pull/13915"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow/pull/13915"}]},{"url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72"},{"source":"nvd","sourceId":"CVE-2026-105741","modified":"2026-10-06T17:17:18.810","url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72"}]},{"url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639"},{"source":"nvd","sourceId":"CVE-2026-105741","modified":"2026-10-06T17:17:18.810","url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639"}]},{"url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-05T20:56:00.060Z","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3"},{"source":"nvd","sourceId":"CVE-2026-105741","modified":"2026-10-06T17:17:18.810","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.10.3"}]},{"url":"https://osv.dev/vulnerability/GHSA-4f6c-2vvp-gw82","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","origins":[{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://osv.dev/vulnerability/GHSA-4f6c-2vvp-gw82"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://osv.dev/vulnerability/GHSA-4f6c-2vvp-gw82"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105741","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","origins":[{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105741"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105741"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105741"}]},{"url":"https://github.com/langflow-ai/langflow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","origins":[{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://github.com/langflow-ai/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/langflow-ai/langflow"},{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://github.com/langflow-ai/langflow"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-4229","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://osv.dev/vulnerability/PYSEC-2026-4229"},{"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4229"}]},{"url":"https://pypi.org/project/langflow","tags":["PACKAGE"],"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://pypi.org/project/langflow"},{"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","url":"https://pypi.org/project/langflow"}]},{"url":"https://github.com/advisories/GHSA-4f6c-2vvp-gw82","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://github.com/advisories/GHSA-4f6c-2vvp-gw82"},{"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","url":"https://github.com/advisories/GHSA-4f6c-2vvp-gw82"}]},{"source":"euvd","sourceId":"EUVD-2026-92800","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92800","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92800","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92800"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","url":"https://osv.dev/vulnerability/GHSA-4f6c-2vvp-gw82","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"fixed":"1.10.3"}]}],"versions":["1.10.0","1.10.0rc0","1.10.1","1.10.1rc0","1.10.1rc3","1.10.2","1.10.2rc4","1.10.3rc0","1.5.0","1.5.0.post1","1.5.0.post2","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.0rc5","1.8.0rc6","1.8.1","1.8.2","1.8.3","1.8.3rc0","1.8.4","1.9.0","1.9.1","1.9.2","1.9.3","1.9.3rc0","1.9.4","1.9.5","1.9.6","1.9.6rc0"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4f6c-2vvp-gw82/GHSA-4f6c-2vvp-gw82.json"},"modified":"2026-10-15T14:56:06.869692666Z","origins":[{"source":"ghsa","sourceId":"GHSA-4f6c-2vvp-gw82","modified":"2026-10-15T14:56:06.869692666Z","url":"https://osv.dev/vulnerability/GHSA-4f6c-2vvp-gw82"}]},{"source":"pysec","sourceId":"PYSEC-2026-4229","url":"https://osv.dev/vulnerability/PYSEC-2026-4229","ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"fixed":"1.10.3"}]}],"versions":["1.10.0","1.10.0rc0","1.10.1","1.10.1rc0","1.10.1rc3","1.10.2","1.10.2rc4","1.10.3rc0","1.5.0","1.5.0.post1","1.5.0.post2","1.5.1","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.0rc5","1.8.0rc6","1.8.1","1.8.2","1.8.3","1.8.3rc0","1.8.4","1.9.0","1.9.1","1.9.2","1.9.3","1.9.3rc0","1.9.4","1.9.5","1.9.6","1.9.6rc0"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/langflow/PYSEC-2026-4229.yaml"},"modified":"2026-10-15T14:45:07.350041709Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4229","modified":"2026-10-15T14:45:07.350041709Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4229"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}