CVE-2026-12945

HIGH

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

CVSS v3.1 Score

7.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW
Published: 7/30/2026Modified: 7/31/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-12945 — IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and m...

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

CVE-2026-12945
NIST NVD

References (1)

https://www.ibm.com/support/pages/node/7279994