medium5.4
CVE-2026-17628
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.
Impact
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.
Affected products
| Product | Affected versions |
|---|---|
| IBM Langflow OSS 1.0.0 | through 1.10.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.