SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-17628

MEDIUM · CVSS 5.4 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.10.2 are vulnerable to improper authentication, enabling remote authenticated attackers to change user account passwords. This could lead to unauthorized access and potential compromise of sensitive information. Organizations using affected versions should prioritize patching to mitigate the risk of account takeover.

CVE
CVE-2026-17628
Severity
MEDIUM
CVSS
5.4
EPSS
0.31%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.