Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7787 Insecure Direct Object References in IBM Langflow OSS 1.0.0 Through 1.9.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7787
Post summary
A brief announcement of CVE‑2026‑7787, describing it as an Insecure Direct Object Reference flaw affecting IBM Langflow OSS versions 1.0.0 through 1.9.1, without additional context or actionable information.
CVE-2026-7787 IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object … https://www.cve.org/CVERecord?id=CVE-2026-7787
Post summary
This notice discloses that IBM Langflow OSS versions 1.0.0‑1.9.1 contain an IDOR-related authentication bypass, enabling authenticated users to read or modify sensitive data; no PoC, exploit, or patch details are included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |