{"data":{"id":"8b714243-0fdb-4d29-9e16-c5a911b2f1cb","title":"CVE-2026-12945: IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs…","summary":"CVE-2026-12945 affects IBM Langflow OSS 1.0.0 through 1.10.1. Authenticated users can access and manipulate other users' build jobs because of improper access control on log retrieval and unauthenticated build endpoints. The weakness is classified as CWE-639, Authorization Bypass Through User-Controlled Key.","solution":"The source text cites an IBM support page (https://www.ibm.com/support/pages/node/7279994) but does not state a fix, patched version, or workaround. N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12945","publishedAt":"2026-07-30T17:16:28.173Z","cveId":"CVE-2026-12945","cweIds":["CWE-639"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS improper access control on build job logs and endpoints","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00364,"epssCheckedAt":"2026-11-11T12:09:48.712Z","kevDateAdded":null,"advisoryAliases":["GHSA-xxrp-rxf8-3mmx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:11:06.981Z","patchAvailable":null,"disclosureDate":"2026-07-30T17:16:28.173Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}