CVE-2026-3346 in Langflow DesktopИнформация

Сводка

по MITRE • 01.05.2026

IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Ibm

Резервировать

27.02.2026

Раскрытие

01.05.2026

Модерация

принято

Вход

VDB-360406

EPSS

0.00035

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-3346
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-3346
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-3346/

◂ ПредыдущийОбзорДалее ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!