Skip to content
OpenAdvisories
High · 7.4 CVE-2026-9205 EUVD-2026-53547GHSA-9pw3-x84f-xcwfGHSA-jxw3-mjmx-3pqmPYSEC-2026-4235

Langflow is affected by weaknesses in secret handling and sensitive configuration access

Published Aug 5, 2026 · Updated Aug 7, 2026 · Assigned by ibm

Vendor: IBM Product: Langflow OSS Package: langflow Ecosystem: PyPI

Description

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.10.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI langflow < 1.10.1 1.10.1 GHSA-jxw3-mjmx-3pqm

Advisories 1

References