Threats Tagged 'cve-2026-19294'

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain an authorization bypass vulnerability (CWE-639) that allows a remote authenticated attacker to execute and read any user's private flow. This occurs due to improper authorization checks related to user-controlled keys. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a medium severity level.

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain an authorization bypass vulnerability (CWE-639) that allows a remote authenticated attacker to execute and read any user's private flow. This occurs due to improper authorization checks related to user-controlled keys. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a medium severity impact.

Multiple vulnerabilities have been identified in Langflow OSS, an open-source visual interface for creating LLM-based applications. The issues relate to authentication weaknesses (CWE-287). The affected versions include all Langflow OSS versions prior to 1.11.2. No official patch or remediation has been confirmed yet. The severity of these vulnerabilities is assessed as high based on available data. There are no known exploits in the wild at this time. The vendor has not provided specific remediation guidance or patches. Users should monitor vendor advisories for updates and apply fixes once available.