IBM Security Bulletin: Langflow Weak Crypto Key Derivation Exposes Stored Credentials (CVE-2026-7874)

www.ibm.com 2026-07-04查看中文 →

Security AdvisoryCVE-2026-7874CriticalIBM

Affected:

Langflow OSS 1.0.0-1.10.0

Fixed in:

1.10.1

Referenced CVEs: CVE-2026-7874 · 9.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.ibm.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Langflow OSS RCE via /api/v1/validate/code (CVE-2026-8481) 2026-07-21 Langflow SSRF Vulnerability (CVE-2026-7754) Security Advisory 2026-07-21 Langflow OSS Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation (CVE-2026-9135) 2026-07-20 IBM Engineering Lifecycle Management XML Entity Expansion DoS Vulnerability (CVE-2026-14979) Advisory 2026-07-20 IBM Storage Protect Client Heap Overflow Vulnerability (CVE-2026-13473) Advisory 2026-07-20

Offline Archive

Offline screenshot & PDF are Pro-exclusive