high7.5
CVE-2026-4503
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a…
Impact
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow Desktop | from 1.0.0 through 1.8.4 |