CVE-2026-7872

IBM Langflow OSS versions 1.0.0 to 1.10.0 are vulnerable to an authentication bypass, allowing authenticated attackers to read arbitrary files, including the JWT signing key. This can lead to the forging of authentication tokens, potentially compromising user accounts and sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and data breaches.