CVE-2026-4503

—

CVSS 3.1

7.5 high

EPSS

<1%p27

Published

Apr 30, 2026 (Apr 30, 2026)

Modified

Jun 17, 2026

Description

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

Vendors: langflow
Products: langflow desktop
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.