High
github
·
GHSA-9pw3-x84f-xcwf
Duplicate Advisory: Langflow: Weak Fernet Key via random.seed()
Published Aug 5, 2026
CVSS 7.4
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-jxw3-mjmx-3pqm. This link is maintained to preserve external references.
Original Description
IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.
Affected AI Products
langflow