CVE-2026-6542 in Langflow OSS

الملخص

بحسب MITRE • 01/05/2026

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Ibm
• حجز: 17/04/2026
• إفشاء: 01/05/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-360402
• CPE: جاهز
• CWE: CWE-639 (مؤكد)
• CVSS: 6.5 (CNA)
• EPSS: 0.00052
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6542
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6542
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6542/