Description
IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 – ≤ 1.10.1 | — |
Advisories 1
- WID-SEC-2026-2366 IBM Langflow Desktop: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 30, 2026
References
- https://www.ibm.com/support/pages/node/7279994 vendor-advisory patch