CVE-2026-19298

IBM Langflow OSS versions 1.0.0 to 1.11.2 are vulnerable to an authorization bypass that enables remote authenticated attackers to execute arbitrary code during the flow build process. This high-severity vulnerability poses significant risks to the integrity and security of applications utilizing these versions. Organizations using affected versions should prioritize immediate remediation to mitigate potential exploitation.