{"id":"CVE-2026-110192","kind":"vulnerability","aliases":["CVE-2026-110192"],"related":[],"title":"Langflow: authenticated users can obtain sensitive credentials from insufficient protection","description":"IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.8 store some credentials insufficiently protected. A remote attacker with a valid account can obtain sensitive information from the server.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","langflow","self-hosted"],"not_affected_if":["no-remote-accounts","version-outside-range"],"how_to_check":"- Check the installed Langflow version with `langflow --version` or the package manager, and see whether it falls within 1.0.0 through 1.12.8.\n- Confirm whether untrusted users can create accounts or log in to the instance.","fix":"- Langflow OSS: move past `1.12.8` (the sources do not name the exact fixed release).","status":"open","published_at":"2026-10-29T16:17:56+00:00","first_seen_at":"2026-10-29T16:25:56+00:00","triaged_at":"2026-10-29T16:31:26+00:00","updated_at":"2026-10-29T16:31:26+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-29T16:31:26Z","model":"claude-haiku-5-5","output":{"fix":"- Langflow OSS: move past `1.12.8` (the sources do not name the exact fixed release).","reach":"internet","title":"Langflow: authenticated users can obtain sensitive credentials from insufficient protection","impact":"medium","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.8 store some credentials insufficiently protected. A remote attacker with a valid account can obtain sensitive information from the server.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["langflow","self-hosted","ai-agents"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authenticated remote user reads sensitive stored credentials","analyst_note":"Check the IBM security bulletin and NVD entry for the affected credential type and the fixed release version.","how_to_check":"- Check the installed Langflow version with `langflow --version` or the package manager, and see whether it falls within 1.0.0 through 1.12.8.\n- Confirm whether untrusted users can create accounts or log in to the instance.","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-range","no-remote-accounts"],"who_is_affected":"Teams running self-hosted IBM Langflow OSS between 1.0.0 and 1.12.8 where remote users can authenticate. The sources do not describe which credentials are exposed or which configuration makes them reachable, so it is unknown whether every deployment in that range is exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000691,"input_tokens":4096,"output_tokens":563,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-110192':13A,16A '-2026':12A,15A '1.0.0':31B,56C '1.12.8':33B,58C 'account':45B 'agent':19B 'ai':18B,21B 'ai-ag':17B 'ai-tool':20B 'allow':60C 'attack':41B,64C 'authent':2A,63C 'could':59C 'credenti':7A,36B,73C 'cve':11A,14A 'due':69C 'host':26B 'ibm':27B,53C 'inform':49B,68C 'insuffici':9A,37B,71C 'langflow':1A,23B,28B,54C 'obtain':5A,47B,66C 'oss':29B,55C 'protect':10A,38B,72C 'remot':40B,62C 'self':25B 'self-host':24B 'sensit':6A,48B,67C 'server':52B 'store':34B 'tool':22B 'user':3A 'valid':44B 'version':30B","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted IBM Langflow OSS between 1.0.0 and 1.12.8 where remote users can authenticate. The sources do not describe which credentials are exposed or which configuration makes them reachable, so it is unknown whether every deployment in that range is exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T16:17:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110192","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110192","severity":null,"published_at":"2026-10-29T16:17:56+00:00","modified_at":"2026-10-29T16:17:56+00:00","first_seen_at":"2026-10-29T16:25:56+00:00","fetched_at":"2026-10-29T16:25:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}