CVE-2026-6597

langflow-ai (Flow Using API) up to version 1.8.3 is affected by CVE-2026-6597. The vulnerability resides in the code path src/backend/base/langflow/api/utils/core.py, specifically the remove_api_keys/has_api_terms functions, which enables unprotected storage of credentials. The issue can be explo...

PT-2026-33692

Name of the Vulnerable Software and Affected Versions langflow-ai langflow versions prior to 1.8.4 Description A weakness in the Flow Using API component allows for the unprotected storage of credentials. This issue occurs within the remove api keys/has api terms function located in the...