{
 "id": "AIR-2026-1108",
 "slug": "cve-2026-7787-authentication-bypass-vulnerability-in-ibm-lan",
 "title": "CVE-2026-7787: Authentication bypass vulnerability in IBM Langflow OSS",
 "summary": "IBM Langflow OSS versions 1.0.0 through 1.9.1 are vulnerable to an authentication bypass via insecure direct object references, enabling data reading or modification. No exploitation in the wild has been reported.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "IBM Langflow OSS"
 ],
 "incident_date": "2026-06-11",
 "incident_date_precision": "day",
 "first_reported": "2026-06-11",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7787",
   "publisher": "NVD",
   "title": "CVE-2026-7787: IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing…",
   "published_at": "2026-06-11"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-7787",
  "idor",
  "langflow"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}