CVSS 8.3 (high) · published 2026-10-20
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.
Affected products (NVD): langflow langflow
Fixed in (NVD): 1.12.5
Weakness: CWE-639
Source: NVD CVE-2026-107366
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.