CyberRota Analysis
AI-GeneratedAuthenticated users of IBM Langflow OSS versions 1.0.0 through 1.10.3 can exploit a vulnerability in a built-in component to access arbitrary server environment variables, potentially exposing sensitive information. This issue undermines existing security measures designed to restrict access to custom components. Organizations using affected versions should prioritize remediation to protect sensitive data from unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components.
Related CVEs
Other vulnerabilities affecting the same vendor(s)