CVE-2026-104314
CVE-2026-104314 · Langflow OSS is affected by multiple vulnerabilities
This page contains facts from public vulnerability sources. Check the original advisory before updating.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
CVSS 6.5 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
langflow oss
- Versions
- ≥ 1.0.0, ≤ 1.12.3: Affected (semver)
No fix published