Langflow OSS CVE-2026-110245

The CVSS vector is AV:N/AC:L/PR:N/UI:N, indicating remote, unauthenticated, no-user-interaction exploitation against network-reachable Langflow OSS instances in versions 1.0.0 through 1.12.4. However, the description only states 'improper authentication' and does not name the specific endpoint, protocol, feature, or configuration that must be present, so the exact trigger is not described in the available sources. The primary limiting factor is network reachability of the Langflow instance (internet-exposed or attacker-reachable deployments are at highest risk) and running an affected 1.0.0-1.12.4 version; upgrading to the vendor-patched release removes exposure.

The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5) describes a network-reachable, unauthenticated flaw that is low-complexity to trigger and yields high confidentiality impact with no integrity or availability effect - consistent with an authentication weakness (CWE-287) exposing sensitive information. Weighing the signals: there is no EPSS probability, no CISA KEV listing, and no PoC or exploit reference in the input, so there is no public exploit identified at time of analysis and no evidence of active exploitation; the only forward-looking signal is the vendor-reported 'this_week' decision label, which indicates meaningful but not emergency urgency. The score is genuinely confidentiality-driven rather than inflated - an unauthenticated network path to high-confidentiality data is a real priority to patch - but the absence of exploitation and probability data suggests prioritized remediation this week rather than a drop-everything emergency. One gap to flag: the description states 'improper authentication' and 'sensitive information' without naming the affected endpoint, feature, or data, so the precise mechanism and the exact nature of the exposed information are not described in the available sources and cannot be presented as confirmed.

A remote, unauthenticated attacker who can reach a Langflow OSS instance over the network sends requests to the affected component and, because authentication is improperly enforced, retrieves sensitive information they should not be able to access (AV:N/AC:L/PR:N/UI:N). The specific endpoint and data exposed are not described in the available sources, and no public exploit or PoC is identified at time of analysis.