CVE-2026-936809.8Critical
Langflow OSS is affected by multiple vulnerabilities
IBM · Langflow OSS
Not in CISA KEVVendor fix available
2.2%probability of exploitation in the next 30 days
82nd percentile
050100
Higher than 82% of scored CVEs
9.8CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 2 Nov.
- Critical Langflow flaws expose servers to unauthenticated attacksThe Hacker News · first in our coverage
New articles also arrive in the RSS feed.