CVE-2026-104316
CVE-2026-104316 · Langflow OSS is affected by multiple vulnerabilities
This page contains facts from public vulnerability sources. Check the original advisory before updating.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.
CVSS 6.5 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
langflow oss
- Versions
- ≥ 1.0.0, ≤ 1.12.3: Affected (semver)
No fix published