EUVD-2026-77781
GHSA-982j-mh39-jcjq
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Network-reachable API but requires a valid authenticated account (PR:L); low complexity, no user interaction, integrity and availability impact only, no direct confidentiality loss.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.
AnalysisAI
An improper authentication flaw (CWE-287) in IBM Langflow OSS versions 1.0.0 through 1.10.2 lets a remote attacker who already holds a valid low-privileged account change the password of another user's account, resulting in account takeover rather than direct code execution. The CVSS 3.1 score is 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L), reflecting that exploitation requires an authenticated session and primarily damages integrity and availability of the targeted account. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must first hold a valid, authenticated Langflow OSS account (CVSS PR:L) on an instance running versions 1.0.0 through 1.10.2, and must be able to reach the Langflow web UI or REST API over the network (AV:N) with the password-change functionality enabled and reachable - this is a default, always-on feature of the product, not an optional module. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signal set is mixed but leans toward a moderate, contained risk: CVSS 5.4 with PR:L and UI:N means the attacker must already hold a working account, so this is not a pre-auth mass-exploitation bug, while CISA's SSVC assessment explicitly states Exploitation: none, Automatable: no, and Technical Impact: partial - the strongest available evidence that this is not currently a wormable or scripted-at-scale issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix: IBM has published a patch-level advisory at https://www.ibm.com/support/pages/node/7286684 stating a fix is available, and because the affected range terminates at 1.10.2, upgrading past 1.10.2 to the version named in that advisory is the primary action - the exact fixed version string is not enumerated in the supplied data, so confirm it on the IBM support page before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Langflow Oss
View allUnauthenticated remote code execution in IBM Langflow OSS versions 1.0.0 through 1.10.0 lets any network-reachable attac
Authenticated command injection in IBM Langflow OSS 1.0.0 through 1.11.1 lets any logged-in flow user escalate to arbitr
Remote code execution in IBM Langflow OSS 1.0.0 through 1.11.1 allows a network-accessible authenticated attacker with l
Unauthenticated remote code execution in IBM Langflow OSS versions 1.0.0 through 1.9.3 allows attackers to fully comprom
Arbitrary Python code execution in IBM Langflow OSS 1.0.0 through 1.10.0 (Langflow versions up to 1.9.2) allows authenti
Remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 allows attackers to run arbitrary code by planting a mali
Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 lets any logged-in user run arbitrary Pytho
Arbitrary file write in IBM Langflow OSS 1.0.0 through 1.10.0 lets an attacker who controls an external HTTP server plan
Remote code injection in IBM Langflow OSS versions 1.0.0 through 1.10.0 allows an authenticated remote attacker to execu
Remote code execution in IBM Langflow OSS 1.0.0 through 1.10.1 stems from improper input validation in the PythonREPL sa
Privilege escalation to remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated user to e
Code injection in IBM Langflow OSS versions 1.0.0 through 1.10.0 lets an authenticated user execute arbitrary operating-
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today