https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:54:31.160496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-8470 CVE-2026-8470 — Langflow is affected by weaknesses in secret handling and sensitive configuration access 2026-10-07T07:54:31.182090+00:00

Affected: IBM Langflow OSS

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for identical seeds, allowing attackers to reproduce encryption keys and decrypt stored API keys and authentication tokens.