中
6.5
Langflow OSS is affected by multiple vulnerabilities
CVE-2026-104316
SecPulse初出
概要
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| IBM | Langflow OSS |
1.0.0 〜 1.12.3 |
— |
参照URL
- web psirt@us.ibm.com