CVE-2026-6542

CVSS Score & Metrics

Base Score

6.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N                                    

Vulnerability Description

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.

Vulnerability Details

Published Date

April 30, 2026

Last Modified

May 04, 2026

CWE ID

CWE-639

Source

NVD

Vendor

langflow

Product

langflow

External References

https://www.ibm.com/support/pages/node/7270886

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment