CVE-2026-8470: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's

IBM Langflow OSS versions 1.0.0 through 1.10.3 use Python's non-cryptographic random module (a weak randomness generator not designed for security) to create Fernet encryption keys (a cryptographic method for protecting data) from user secrets under 32 characters. Because the Mersenne Twister PRNG (pseudorandom number generator, an algorithm that produces predictable sequences) produces identical keys from identical seeds, attackers can recreate these keys and decrypt stored API keys and authentication tokens.