CVE-2026-104314: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
Other sources
Langflow OSS could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.4 - Operational
Back up the existing Langflow OSS installation before upgrading.
- Operational
Test your flows after installing Langflow OSS version 1.12.4.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated attacker needs a read or share grant on the target flow. The issue affects the owner of that flow because the attacker can retrieve the owner’s stored third-party credentials.
Which versions are affected?
IBM Langflow OSS versions 1.0.0 through 1.12.3 are affected.
What data could be exposed?
Stored third-party credentials belonging to the target flow’s owner may be returned in cleartext in an API response. The stated impact is confidentiality loss; integrity and availability impacts are not indicated.