CVE-2026-4503

Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint PUBLISHED

Description (CNA)

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow Desktop	affected 1.0.0 through 1.8.4

CWE

CWE-639

References

https://www.ibm.com/support/pages/node/7271099

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.