AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2026-17627: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and in

mediumvulnerability

security

Source: NVD/CVE DatabaseSeptember 4, 2026CVE-2026-17627

Summary

IBM Langflow OSS (an open-source tool for building AI workflows) versions 1.0.0 through 1.10.2 has a security flaw where authenticated attackers (users with login credentials) can access sensitive information and add fake messages to workflow history because the system doesn't properly check what users are allowed to do.

Vulnerability Details

CVSS Score

4.9(medium)

EPSS (30-day exploit probability)

EPSS: 0.0%

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector

network

Attack Complexity

high

Privileges Required

low

User Interaction

none

Disclosure Date

September 4, 2026

Classification

Attack Type

Data Extraction

Attack SophisticationModerate

Impact (CIA+S)

confidentialityintegrity

Taxonomy References

CWE (Weakness Type)

CWE-639

Affected Vendors

LangChain

Related Issues

medium

CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e

Same vendorNVD/CVE Database

critical

CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-

Same vendor

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-17627

First tracked: September 4, 2026 at 02:08 PM

Classified by LLM (prompt v3) · confidence: 92%