CVE-2026-19875 — Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authent…
Published: 2026-08-19 · CVSS: 7.5 · CVSS 3.1
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7