Live › vulnerability › CVE-2026-110200
IBM Langflow OSS versions 1.0.0 through 1.12.4 store some sensitive information in cleartext. A remote attacker who already has a valid account can obtain that information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams that run IBM Langflow OSS 1.0.0 through 1.12.4 as a server where users log in. The sources do not describe which stored data is exposed or which configuration makes it reachable, so the exact exposure is unknown.
No product ranges from the sources yet.
langflow --version or the package manager, and see whether it falls in 1.0.0 through 1.12.4.1.12.4; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-110200")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.