CVE-2026-104314

IBM Langflow OSS versions 1.0.0 through 1.12.3 are affected by CVE-2026-104314 , where an authenticated attacker with read or share permissions on a target flow can retrieve the flow owner's third-party credentials in cleartext from the API response. This vulnerability is caused by insufficiently...