Beveiligingsadvies

CVE-2026-85025

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-10 20:58:37
Laatst bijgewerkt 2026-09-12 03:55:25
Toegewezen door ibm
CVSS-score 9.8
Status PUBLISHED

Beschrijving

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.