CVE-2026-17628 — Vulnerability intelligence

langflow — langflow

Published: 2026-09-14T20:16:42.140

CVSS

5.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication.

Sources

• CVE-2026-17628
• Patch, Vendor Advisory