CVE-2026-19875

HighCVSS 7.5

Published: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint.

Risk Assessment

An attacker can take over the administrator account and use the server to send unsolicited messages, compromising integrity and reputation.

Recommendation

Update IBM Langflow OSS to a version newer than 1.10.0 or apply available security patches.

Original NVD description (English source)

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint.