CVE-2026-6598
medium
CVSS v3
4.3
CVSS v2
4.0
VIR risk
4.3
Description
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
Predictions
Exploit likelihood
53%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| PyPI | langflow | <1.9.1 | 1.9.1 |
References
- https://gist.github.com/chenhouser2025/77adb3486c06c635ae4b09a3eaf90213
- https://vuldb.com/submit/791921
- https://vuldb.com/vuln/358233
- https://vuldb.com/vuln/358233/cti
- https://nvd.nist.gov/vuln/detail/CVE-2026-6598
- https://github.com/langflow-ai/langflow/commit/45325f6376309a91f5017fa033a96c09c7e295e3
- https://github.com/langflow-ai/langflow
CWEs
CWE-312 CWE-313
Verify integrity in audit chain (admin only). AS-IS.