{"data":{"id":"0931e7f3-8167-4ab9-8214-b92cc94844b4","title":"CVE-2026-7787: IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by…","summary":"CVE-2026-7787 affects IBM Langflow OSS versions 1.0.0 through 1.9.1. An authenticated user can bypass authentication through insecure direct object references, allowing them to read or modify sensitive information. The weakness is classified as CWE-639, Authorization Bypass Through User-Controlled Key.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7787","publishedAt":"2026-06-11T16:16:25.090Z","cveId":"CVE-2026-7787","cweIds":["CWE-639"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS authorization bypass via insecure direct object references","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00248,"epssCheckedAt":"2026-11-04T18:09:13.655Z","kevDateAdded":null,"advisoryAliases":["GHSA-gfrh-qj3c-qwrr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:40.862Z","patchAvailable":null,"disclosureDate":"2026-06-11T16:16:25.090Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}