Sensitive Information Exposure in IBM Langflow OSS
CVE-2026-77817

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Langflow Oss
Vendor
CVE Published:
29 October 2026

What is CVE-2026-77817?

IBM Langflow OSS versions 1.0.0 to 1.12.4 are affected by a vulnerability that allows a remote authenticated attacker to expose sensitive information. This occurs due to inadequate sanitization processes during the export of flows and projects, potentially leading to the unauthorized disclosure of secrets. Administrators are recommended to review their security practices and apply patches as advised by the vendor.

Affected Version(s)

Langflow OSS 1.0.0 <= 1.12.4

References

https://www.ibm.com/support/pages/node/7293016
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.