CVE Catalog
CVE-2026-19297
CriticalCVSS 9.1Summary
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts.
Risk Assessment
The risk includes user account takeover through brute-force attacks, potentially leading to unauthorized access to application data and functionality.
Recommendation
It is recommended to update IBM Langflow OSS to a patched version and implement login attempt limiting mechanisms, such as account lockout after multiple failed attempts.
Original NVD description (English source)
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts.