CVE-2026-12945

—

CVSS 3.1

7.1 high

EPSS

<1%p12

Published

Jul 30, 2026 (Jul 30, 2026)

Modified

Aug 4, 2026

Description

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

Vendors: langflow
Products: langflow
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.