CVE-2026-101331
Analyzed Analyzed - Analysis Complete

IBM Langflow OSS Credential Exposure Vulnerability

Publication date: 2026-10-07

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-08
Generated
2026-10-19
AI Q&A
2026-10-07
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101331
EUVD
EUVD-2026-94129

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
langflow langflow From 1.0.0 (inc) to 1.12.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Langflow OSS versions 1.0.0 through 1.12.2 have a vulnerability where a remote authenticated attacker could obtain sensitive information due to insufficiently protected credentials.

Impact Analysis

An attacker could exploit this to access sensitive data, potentially leading to data breaches or unauthorized access to system resources.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate GDPR, HIPAA, or other regulations requiring strict data protection.

Mitigation Strategies

Upgrade IBM Langflow OSS to version 1.12.3 or later to address the vulnerability. Ensure proper access controls are implemented to prevent unauthorized access to sensitive information.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101331. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart