{"data":{"id":"8b714243-0fdb-4d29-9e16-c5a911b2f1cb","title":"CVE-2026-12945: IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs throug","summary":"IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 has a security flaw where authenticated users (those with login credentials) can view and change other users' build jobs because certain endpoints lack proper access control checks. This happens through improper authorization on log retrieval and unauthenticated build endpoints (entry points that don't require login verification).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12945","publishedAt":"2026-07-30T17:16:28.173Z","cveId":"CVE-2026-12945","cweIds":["CWE-639"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-30T17:16:28.173Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}