CVE-2026-19294: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private

IBM Langflow OSS (an open-source tool for building AI applications) versions 1.0.0 through 1.11.1 has a security flaw where someone who is logged into the system could view or run private workflows belonging to other users because the software doesn't properly check permissions (improper authorization, meaning the system doesn't verify who should have access to what).