CVE-2026-19875 in Langflow OSS

Riassunto

di MITRE • 19/08/2026

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Ibm
• Prenotare: 14/08/2026
• Divulgazione: 19/08/2026
• Moderazione: accettato
• Voce: VDB-393251
• CPE: pronto
• CWE: CWE-306 (confermato)
• CVSS: 7.5 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19875
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19875
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19875/