CVE-2026-19300

IBM Langflow OSS versions 1.0.0 through 1.11.2 fail to fully scrub sensitive credential fields, a CWE-200 information-exposure flaw that can leak secrets handled by the application. A remote attacker who can reach an affected Langflow instance over the network (CVSS 3.1 AV:N/AC:L/PR:N/UI:N, no privileges or user interaction required) can retrieve these incompletely scrubbed credential fields in output. Successful exploitation yields confidentiality impact only (C:H, I:N/A:N), giving the attacker access to sensitive credential material such as stored secrets, which could then be abused against dependent services. All deployments running Langflow OSS 1.0.0 through 1.11.2 are affected, with risk concentrated on instances reachable by untrusted networks. There is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS puts current exploitation probability at 0.4% over 30 days (31st percentile).

What to do: Update Langflow OSS to the first release after 1.11.2 as directed by IBM's advisory, since the data does not specify a fixed version number. Until patched, restrict network access to Langflow instances (firewall them from untrusted networks) and audit and rotate any credentials stored in Langflow if you find evidence of unauthorized access. Because the flaw is confidentiality-only, prioritize identifying instances where leaked keys could grant access to third-party services.