Threats tagged 'ghsa-q2jq-rc3f-8jv2'

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request. This flaw results in the loss of in-progress compute work and occurs due to the absence of flow-level permission checks.