Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7282648 Clear all filters
TI-2026-07439 CVE-2026-8470 · GHSA-8jj7-whc4-r6j5

Langflow is affected by weaknesses in secret handling and sensitive configuration access

Priority MEDIUM 40

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 ch…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00111 Published 2026-08-05 No fix listed CWE-327
TI-2026-08881 CVE-2026-10128 · GHSA-47c3-vjq8-vj9m

Langflow is affected by weaknesses in secret handling and sensitive configuration access

Priority LOW 28

IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00256 Published 2026-08-05 No fix listed CWE-200