CVE-2026-1101926.5Medium
Langflow OSS is affected by multiple vulnerabilities
IBM · Langflow OSS
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
16th percentile
050100
Higher than 16% of scored CVEs
6.5MediumCVSS
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 2 Nov.
- Critical Langflow flaws expose servers to unauthenticated attacksThe Hacker News · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.