VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
CERT/CC says Lowcoder 2.4.10 lets admins or developers read and run other tenants' library queries.
3
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #low-code
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise
Attacks exploiting CVE-2026-0768, a critical vulnerability in the Langflow low-code AI platform, are rising amid growing adversary attention this year.
2