CVE-2026-4503

Published Apr 30, 2026·Updated Jun 17, 2026

NVD Description

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

Public Exploits & PoCs1 found

[POC] GHSA-8gj2-2cvc-6xx7 — cve-2026-45033-class

CVE-2026-45033 PoC for Claude Code, not Github Copilot. Worked for Haiku 4.5.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free