Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/17 6:17 p.m.6 views

CVE-2026-9202

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...

9.8CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:33 p.m.7 views

CVE-2026-9202

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...

9.8CVSS5.3AI score0.00279EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder