CVE-2026-81268

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to remote authenticated attacks that exploit insufficient session expiration of API keys after user deactivation, potentially allowing attackers to execute flows and access sensitive information. Organizations using these versions should prioritize remediation to mitigate the risk of unauthorized access and data exposure. Immediate action is recommended for those managing sensitive data or relying on API integrations within their workflows.