CVE-2026-19302

IBM Langflow OSS versions 1.0.0 through 1.11.2 are vulnerable to improper validation of symbolic links, which could enable a remote authenticated attacker to access sensitive information. Organizations using these versions should prioritize remediation to mitigate the risk of data exposure. Security teams should assess their environments for affected versions and implement necessary updates or workarounds.