medium4.2
CVE-2026-12763
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in …
Impact
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component.
Affected products
| Product | Affected versions |
|---|---|
| IBM Langflow OSS 1.0.0 | through 1.11.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.