7.5Yüksek
CVE-2026-4503Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
Açıklama
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.
Zayıflık türü (CWE):
CWE-639
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| IBM | Langflow Desktop | 1.0.0 – ≤ 1.8.4 | |
| langflow | langflow desktop | 1.0.0 – ≤ 1.8.4 |
Kaynaklar ve yamalar
- https://www.ibm.com/support/pages/node/7271099 vendor-advisorypatchVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:langflow:langflow_desktop:*:*:*:*:*:*:*:*≥ 1.0.0 ≤ 1.8.4