CVE-2026-18891

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication.

  • Published Aug 28, 2026
  • CVSS 8.2 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-18891 at the National Vulnerability Database