{
 "id": "AIR-2026-1136",
 "slug": "cve-2026-10134-ibm-langflow-oss-critical-vulnerability-enabl",
 "title": "CVE-2026-10134: IBM Langflow OSS critical vulnerability enables secret exposure and remote code execution",
 "summary": "A critical vulnerability in IBM Langflow OSS versions 1.0.0 through 1.9.3 allows attackers to read system secrets, access the application database, and execute arbitrary code. No active exploitation has been publicly confirmed.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "IBM Langflow OSS"
 ],
 "incident_date": "2026-06-30",
 "incident_date_precision": "day",
 "first_reported": "2026-06-30",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10134",
   "publisher": "NVD",
   "title": "CVE-2026-10134: IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify…",
   "published_at": "2026-06-30"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-10134",
  "langflow",
  "rce",
  "infra_vuln"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}