High severity8.2NVD Advisory· Published Jun 30, 2026· Updated Jul 2, 2026
CVE-2026-10560
CVE-2026-10560
Description
IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel jobs using a valid job identifier, resulting in information disclosure and denial of service.
Affected products
2- Range: 1.0.0 - 1.9.6
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7277996nvdVendor Advisory
News mentions
0No linked articles in our index yet.