CVE-2026-19875

IBM Langflow OSS versions 1.0.0 to 1.10.0 are vulnerable due to a lack of authentication on the registration endpoint, enabling remote attackers to overwrite administrator email settings. This could lead to unauthorized use of the server as an outbound relay, posing significant risks to the integrity and confidentiality of communications. Organizations using affected versions should prioritize patching to mitigate potential exploitation.