CVE-2026-19875: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abu

IBM Langflow OSS versions 1.0.0 through 1.10.0 have a security flaw where the registration endpoint lacks authentication (a check to verify who is making requests), allowing remote attackers to change the administrator's email address and potentially use the server to send spam or malicious emails. This vulnerability is classified as CWE-306 (missing authentication for critical function).