What is the CVSS score of CVE-2026-97680?

CVE-2026-97680 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.3%.

Which versions of IBM Langflow OSS are affected by CVE-2026-97680?

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an access-control flaw in the vertex result caching subsystem that allows a low-privileged authenticated user to read sensitive cached data or…. A patch is available.

How to fix or mitigate CVE-2026-97680?

Within 24 hours, inventory all IBM Langflow OSS deployments, confirm whether any instance runs versions 1.0.0 through 1.12.2, and apply the vendor patch per IBM advisory node/7290694 where feasible; if immediate patching is not possible, restrict network access to trusted users, enforce least privilege, and review vertex/cache audit logs for unauthorized reads or suspicious content injection. Within 7 days, patch or upgrade every affected Langflow OSS instance beyond the vulnerable version range as directed by the vendor, rotate any credentials or secrets that may have been exposed through cached data, and validate that shared vertex results have not been tampered with. Within 30 days, complete an access-control review for all Langflow users and service accounts, verify remediation through version checks and monitoring, and update vulnerability management and incident response runbooks to cover this CVE.

IBM Langflow OSS CVE-2026-97680

EUVD-2026-94125 HIGH

Improper Access Control (CWE-284)

2026-10-06 ibm

GHSA-rc3v-3p84-v27h

Authentication Bypass IBM Langflow Oss

8.3

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.3 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

vuln.today AI

8.3 HIGH

Remotely reachable cache subsystem with low complexity and no UI, but a valid low-privilege account is required (PR:L); high confidentiality/integrity from reading and injecting cached data, minor availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Oct 07, 2026 - 00:49 vuln.today

CVE Published

Oct 06, 2026 - 23:59 cve.org

HIGH 8.3

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.

AnalysisAI

Improper access control in the vertex result caching subsystem of IBM Langflow OSS 1.0.0 through 1.12.2 lets a remote authenticated attacker read sensitive cached data or inject malicious content into vertex results that other users then consume. The issue carries a CVSS 3.1 base score of 8.3 (High) under the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L, meaning it is network-reachable with low complexity and requires only a low-privileged account, while yielding high confidentiality and integrity impact and low availability impact. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires a valid authenticated account on the target Langflow OSS instance (1.0.0 through 1.12.2) with network reachability to the service; exploitation occurs through interaction with the vertex result caching subsystem, where improper access control lets an authenticated user access or tamper with cached vertex results beyond their authorization. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 8.3 (High) is driven by the AV:N/AC:L/PR:L/UI:N vector: remotely reachable, low attack complexity, no user interaction, and only a low-privileged authenticated account required, with High confidentiality and integrity impact plus Low availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Patch available per vendor advisory: IBM has released a fix documented at https://www.ibm.com/support/pages/node/7290694, and operators should upgrade any Langflow OSS instance in the 1.0.0 through 1.12.2 range to the patched build identified there - because the advisory does not state an exact version string in the data provided, confirm the target build level against that page before closing the ticket. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all IBM Langflow OSS deployments, confirm whether any instance runs versions 1.0.0 through 1.12.2, and apply the vendor patch per IBM advisory node/7290694 where feasible; if immediate patching is not possible, restrict network access to trusted users, enforce least privilege, and review vertex/cache audit logs for unauthorized reads or suspicious content injection. …

Threat intelligence, references, and detailed analysis are available after sign-in.