CVE-2026-176285.4MediumCWE-287
IBM Langflow OSS vulnerability
IBM · Langflow OSS
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
38th percentile
050100
Higher than 38% of scored CVEs
5.4MediumCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- Critical Langflow Flaw Lets Authenticated Users Run Code as RootSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.