VulnWatch VulnWatch
← Back to dashboard
Medium nvd · CVE-2026-104316

CVE-2026-104316: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo

Published Oct 29, 2026 CVSS 6.5

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.

Affected AI Products

langflow
Get the weekly digest. Every Monday: top AI security stories of the week. Free.