AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-12945

IBM Langflow OSS: improper access control

IBM

CVE-2026-12945 · Published Jul 30, 2026 · updated Aug 4, 2026

High7.1
No fix yet
IBM advisory

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.10.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-639

More IBM advisories

All IBM
High 8.5Jul 30IBM WebSphere Application Server: remote code executionCVE-2026-11536no fix yetCritical 9.9Jul 30IBM Langflow OSS: code injectionCVE-2026-12946no fix yetMedium 4.3Jul 30UCD - IBM: information disclosureCVE-2026-10569no fix yetCritical 9.9Jul 30IBM Langflow OSS: improper input validationCVE-2026-13435no fix yetHigh 8.1Jul 30IBM Langflow OSS: attacker could access another user's private vectorCVE-2026-13444no fix yetHigh 7.5Jul 30IBM Langflow OSS: path traversalCVE-2026-12942no fix yet