← CVE Intelligence

CVE-2026-9205

Langflow is affected by weaknesses in secret handling and sensitive configuration access PUBLISHED

Description (CNA)

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

Affected (CNA)

Vendor / productVersions
IBM / Langflow OSSaffected 1.0.0 through 1.10.3

CWE

CWE-338

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.