CVE-2026-93677

Summary

A remote authenticated attacker can access sensitive information in IBM Langflow OSS versions 1.0.0 through 1.12.2 due to improper access controls that expose confidential data to unauthorized users.

Exploitability

Exploitation requires an authenticated user account with access to the application, making it moderately difficult to exploit without prior access but not requiring advanced technical skills.

Blast radius

If exploited, attackers could gain access to sensitive internal data, configuration files, or user information across all affected Langflow instances, potentially leading to further compromise of connected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Langflow OSS version 1.12.3 or later to address the sensitive information exposure vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.