{"data":{"id":"1b9b297a-796d-4142-b2f8-c5c33d26cd7b","title":"CVE-2026-6600: A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file…","summary":"CVE-2026-6600 is a flaw in langflow-ai langflow up to 1.8.3, in the Frontend React Component Rendering component, specifically the file src/frontend/src/modals/IOModal/components/chatView/chatMessage/components/edit-message.tsx. Manipulating this function can lead to cross site scripting, and the attack may be launched remotely. A published exploit exists, and the vendor did not respond to early contact about the disclosure.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6600","publishedAt":"2026-04-20T04:16:54.603Z","cveId":"CVE-2026-6600","cweIds":["CWE-79","CWE-94"],"cvssScore":"3.5","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Langflow cross site scripting in chat message editing component","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00331,"epssCheckedAt":"2026-10-14T00:06:45.166Z","kevDateAdded":null,"advisoryAliases":["GHSA-mxmx-pwg2-cg2h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:49:25.043Z","patchAvailable":null,"disclosureDate":"2026-04-20T04:16:54.603Z","capecIds":["CAPEC-198","CAPEC-242","CAPEC-86"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}