What is the CVSS score of CVE-2026-19875?

CVE-2026-19875 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.4%.

Which versions of IBM Langflow OSS are affected by CVE-2026-19875?

IBM Langflow OSS versions 1.0.0-1.10.0 contain an unauthenticated registration vulnerability allowing attackers to seize administrator email addresses and hijack the application as an outbound mail…. A patch is available.

How to fix or mitigate CVE-2026-19875?

Within 24 hours, inventory all IBM Langflow OSS instances running versions 1.0.0-1.10.0 across your environment and apply the available vendor patch; verify patch deployment on all instances. Within 7 days, audit registration endpoint logs and administrator account activity logs for suspicious account creation or email modifications; reset credentials for any administrator accounts created outside normal change management procedures. By day 30, rotate all administrator credentials for patched instances, restrict the registration endpoint to authorized administrators only via firewall or load balancer rules, and document incident timeline and any email relay logs for compliance and forensics review.

IBM Langflow OSS CVE-2026-19875

EUVD-2026-62606 HIGH

Missing Authentication for Critical Function (CWE-306)

2026-08-19 ibm

GHSA-w32j-3vcp-72g3

Authentication Bypass IBM Langflow Oss

7.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

vuln.today AI

7.5 HIGH

AV:N/PR:N confirmed by unauthenticated network endpoint; I:H reflects administrator email overwrite and relay abuse; C:N as no direct data exfiltration is described.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 19, 2026 - 18:26 vuln.today

CVE Published

Aug 19, 2026 - 17:38 nvd

HIGH 7.5

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint.

AnalysisAI

Unauthenticated remote attackers can overwrite administrator email addresses and abuse IBM Langflow OSS as an outbound mail relay by exploiting a missing authentication control on the registration endpoint, affecting versions 1.0.0 through 1.10.0. The CVSS vector AV:N/AC:L/PR:N/UI:N confirms trivially reachable exploitation with no credentials or user interaction required. No public exploit or CISA KEV listing has been identified at time of analysis, though the low attack complexity makes this viable for opportunistic exploitation once the endpoint is discovered.

Technical ContextAI

IBM Langflow OSS is IBM's distribution of the open-source Langflow AI/LLM workflow orchestration platform, identified by CPE cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:*. The root cause is CWE-306 (Missing Authentication for Critical Function): the user registration endpoint processes account creation and modification requests without enforcing any authentication gate, allowing unauthenticated callers to supply arbitrary account data including administrator-level email addresses. That the attack permits overwriting existing admin email - not merely creating new accounts - indicates the endpoint conflates registration and update logic without differentiating caller privileges. The outbound relay abuse vector suggests the same unauthenticated code path triggers server-side mail dispatch, making the instance a usable spam or phishing relay without any credential.

RemediationAI

Apply the vendor-released patch per the IBM security advisory at https://www.ibm.com/support/pages/node/7283810; a fix is confirmed available from IBM, though the exact patched version number is not independently confirmed from the available input data - consult the advisory directly for the specific target version. As an immediate compensating control, restrict network access to the registration endpoint (e.g., /api/v1/register or its equivalent) via firewall rules, reverse-proxy ACLs, or WAF policy, limiting reachability to trusted internal IP ranges only - note this trade-off prevents legitimate external self-registration. Additionally, audit all administrator account email addresses for unauthorized modifications and monitor outbound SMTP traffic for anomalous relay patterns that could indicate abuse already in progress.