CVE-2026-110200: IBM Langflow OSS vulnerability
Published Oct 19, 2026
·Updated
Langflow OSS could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.
Affected Software
1 affected component
IBM Langflow OSS<=1.0.0 - 1.12.4
Event History
Oct 19, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
Can an unauthenticated attacker exploit this issue?
The issue is described as requiring remote authenticated access. An attacker would need valid authentication before attempting to obtain the affected sensitive information.