CVE-2026-7874: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak

IBM Langflow OSS versions 1.0.0 through 1.10.0 have a security flaw where stored credentials can be exposed because the software uses weak encryption at rest (encryption that protects data when it's not being actively used). The problem stems from using a poor key derivation mechanism, which is the process that converts a password into the actual encryption key.