medium6.5
CVE-2026-104316
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP req…
Impact
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow | from 1.0.0 before 1.12.4 |