Live › vulnerability › CVE-2026-104314
IBM Langflow OSS versions 1.0.0 through 1.12.3 return a flow owner's stored third-party credentials in cleartext in an API response. An authenticated user with only a read or share grant on that flow can retrieve those secrets.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted Langflow OSS from 1.0.0 through 1.12.3 where flows store third-party credentials and are shared with other users. Exposure requires an account with read or share access to a flow owned by someone else. Installations without shared flows or without stored third-party credentials have less exposure.
No product ranges from the sources yet.
langflow --version or the package manager, and see whether it falls in 1.0.0 through 1.12.3.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
This page as .md · .json · in your agent: get_signal("CVE-2026-104314")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.