CVE-2026-8470

CVE-2026-8470 affects IBM Langflow OSS (versions 1.0.0–1.10.3). The root cause is use of Python’s non-cryptographic random module to generate Fernet encryption keys from user secrets shorter than 32 characters. This relies on the deterministic Mersenne Twister PRNG, which can produce identical ke...