CVE-2026-12945 — Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenti…
Published: 2026-07-30 · CVSS: 7.1 · CVSS 3.1
IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7