Medium severity6.5NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026
CVE-2026-104314
CVE-2026-104314
Description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0.0 - 1.12.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.