CVE-2026-10129: SSRF via HTTP Redirect Following in Langflow API Request Component
IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the followredirects parameter and supplying a public URL that redirects to internal/localhost addresses. The vulnerability exists because the application validates only the initial URL but does not re-validate redirect destinations. This allows attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be unreachable when SSRF protection is enabled. Successful exploitation can lead to disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data.
Other sources
Langflow OSS contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.10.0 - Configuration
Set the API Request component follow_redirects parameter to prevent HTTP redirect following, since enabling follow_redirects allows redirect destinations to bypass SSRF protection.
IBM Langflow OSS API Request component follow_redirects = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10129?
The severity of CVE-2026-10129 is rated high with a CVSS score of 8.5.
How do I fix CVE-2026-10129?
To fix CVE-2026-10129, disable the follow_redirects parameter in the API Request component of IBM Langflow OSS.
What type of vulnerability is CVE-2026-10129?
CVE-2026-10129 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
Who is affected by CVE-2026-10129?
CVE-2026-10129 affects users of IBM Langflow OSS versions 1.0.0 through 1.9.3 with low-level authenticated privileges.
What can happen if CVE-2026-10129 is exploited?
Exploitation of CVE-2026-10129 allows an attacker to bypass SSRF protections, potentially leading to unauthorized access to internal systems.