Live › vulnerability › CVE-2026-110192
IBM Langflow OSS versions 1.0.0 through 1.12.8 store some credentials insufficiently protected. A remote attacker with a valid account can obtain sensitive information from the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted IBM Langflow OSS between 1.0.0 and 1.12.8 where remote users can authenticate. The sources do not describe which credentials are exposed or which configuration makes them reachable, so it is unknown whether every deployment in that range is exposed.
No product ranges from the sources yet.
langflow --version or the package manager, and see whether it falls within 1.0.0 through 1.12.8.1.12.8 (the sources do not name the exact fixed release).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.
This page as .md · .json · in your agent: get_signal("CVE-2026-110192")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.