CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.10.2 are vulnerable to improper authorization, enabling remote authenticated attackers to access sensitive information and inject messages into workflow history. This could lead to data leakage and manipulation of workflow processes. Organizations using affected versions should prioritize remediation to mitigate potential risks to their data integrity and confidentiality.
CVE
CVE-2026-17627
Severity
MEDIUM
CVSS
4.9
EPSS
0.20%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)