
Vulnerabilities
IBM Langflow OSS CVE-2026-107366: Authenticated Users Can Hijack Sessions
IBM Langflow OSS versions up to 1.12.4 lack ownership checks on message endpoints, allowing any logged-in user to delete or alter other users' data.
Everything Packet Tribune has reported about IBM: 2 stories, newest first. Part of our Vulnerabilities coverage.

IBM Langflow OSS versions up to 1.12.4 lack ownership checks on message endpoints, allowing any logged-in user to delete or alter other users' data.

IBM warns that improper authentication in Security Verify Access allows remote attackers to bypass security restrictions without a confirmed patch.