CVE-2026-19297

creationtimestamp| type| source ---|---|--- 2026-08-13 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyl4c6onl2e 2026-08-13 22:41:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdnranjkik2zs...

CVE-2026-19297

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts...

CVE-2026-19297 Insufficient Authentication Brute Force Protection on Login Endpoint

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts...

Security Bulletin: Insufficient Authentication Brute Force Protection on Login Endpoint

Summary A rate limiting capability exists within the product to restrict the number of authentication attempts permitted per IP address per minute against the login endpoint POST /api/v1/login. This control is configurable via the LANGFLOWRATELIMITENABLED environment variable, which defaults to...