CVE-2026-110200
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Oct 29, 2026
CISA due date
—
The record
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116691 MLflow is an open source AI engineering platform for agents, large language models, and… CWE-312
- CVE-2026-115400 crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows… CWE-312
- CVE-2026-96293 A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint… CWE-312
- CVE-2026-114223 NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information… CWE-312
- CVE-2026-77564 Talos Linux is a Linux distribution built for Kubernetes deployments. CWE-312
- CVE-2026-86280 A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management &… CWE-312
- CVE-2026-53603 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-312
- CVE-2026-73748 A vulnerability in the affected interface of HPE Networking Fabric Composer allows an… CWE-312