CVE-2026-10564

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.

• CWE-918

• https://www.ibm.com/support/pages/node/7277995Vendor Advisory

Published

Jun 30, 2026

Last Modified

Jul 2, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10558A vulnerability was detected in SourceCodester Pizzafy Ecomm…6.3
• CVE-2026-10559A flaw has been found in SourceCodester Pizzafy Ecommerce Sy…6.3
• CVE-2026-1056The Snow Monkey Forms plugin for WordPress is vulnerable to …9.8
• CVE-2026-10560IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing auth…9.1
• CVE-2026-10561IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability du…10
• CVE-2026-10562An unauthenticated URL redirection vulnerability has been id…5.9
• CVE-2026-10565A security flaw has been discovered in Open5GS up to 2.7.6. …3.1
• CVE-2026-10566A weakness has been identified in FoundationAgents MetaGPT u…5.3
• CVE-2026-10567A security vulnerability has been detected in 1Panel-dev Cor…3.5
• CVE-2026-10568A vulnerability was detected in itsourcecode Fees Management…6.3
• CVE-2026-10569IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3…4.3
• CVE-2026-10570The Sympl Repeater for ACF and Elementor plugin for WordPres…6.4