CVE-2026-8447

IBM Langflow OSS versions 1.0.0 to 1.11.2 are susceptible to a stored cross-site scripting vulnerability within the Playground chat interface, allowing attackers to inject malicious scripts that can be executed in the context of users' browsers. This could lead to unauthorized actions or data exposure for users interacting with the affected interface. Organizations using these versions should prioritize remediation to protect their users from potential exploitation.