{"data":{"id":"af2b8eda-e3de-4b5d-9fb5-46f594cb1267","title":"CVE-2026-10560: IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/…","summary":"CVE-2026-10560 affects IBM Langflow OSS versions 1.0.0 through 1.9.6. The /api/v1/build_public_tmp/ endpoints lack authentication, so an unauthenticated attacker holding a valid job identifier can read build event data or cancel jobs. The result is information disclosure and denial of service. NVD has not yet provided an assessment, and the weakness is classified as CWE-287, Improper Authentication.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-10560","publishedAt":"2026-06-30T20:17:27.263Z","cveId":"CVE-2026-10560","cweIds":["CWE-287"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS missing authentication in /api/v1/build_public_tmp endpoints","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00484,"epssCheckedAt":"2026-10-14T12:12:43.428Z","kevDateAdded":null,"advisoryAliases":["GHSA-w636-w53p-5frh"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:15.423Z","patchAvailable":null,"disclosureDate":"2026-06-30T20:17:27.263Z","capecIds":["CAPEC-114"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}