中
6.5
Langflow OSS is affected by multiple vulnerabilities
CVE-2026-104314
SecPulse初出
概要
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| IBM | Langflow OSS |
1.0.0 〜 1.12.3 |
— |
参照URL
- web psirt@us.ibm.com