CVE-2026-19297: IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to

IBM Langflow OSS (open-source software) versions 1.0.0 through 1.9.6 has a security vulnerability where an attacker can gain unauthorized access to user accounts because the system doesn't properly limit how many times someone can try to log in with wrong credentials. This weakness, called CWE-307 (improper restriction of excessive authentication attempts), allows attackers to keep trying passwords without being stopped.