CVE-2026-7874

Weak Cryptographic Key Derivation Exposed All Stored Credentials PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

CWE-338

References

https://www.ibm.com/support/pages/node/7278447

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.