Is CVE-2026-18891 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18891?

CVE-2026-18891 has a CVSS v3 severity of HIGH (8.2).

Back

CVE-2026-18891

Description

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication.