CVE-2026-7787

—

CVSS 3.1

8.1 high

EPSS

<1%p16

Published

Jun 11, 2026 (Jun 11, 2026)

Modified

Jun 17, 2026

Description

IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.

Vendors: langflow
Products: langflow
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.