Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-17627

Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Langflow OSS

  • 1.0.0 to ≤ 1.10.2affected

References