{"action":"Upgrade langflow to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"}],"component":"langflow","cve_ids":["CVE-2026-6598"],"ecosystem":"PyPI","epss":0.00152,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-9jpj-cph8-w449","id":"tcs_01M5KFB3J6GQDM53R2T5Z635MM","modified_at":"2026-07-13T16:43:22.531865991Z","published_at":"2026-04-20T06:31:27Z","references":["https://osv.dev/vulnerability/GHSA-9jpj-cph8-w449","https://nvd.nist.gov/vuln/detail/CVE-2026-6598","https://github.com/langflow-ai/langflow/commit/45325f6376309a91f5017fa033a96c09c7e295e3","https://gist.github.com/chenhouser2025/77adb3486c06c635ae4b09a3eaf90213","https://github.com/langflow-ai/langflow","https://vuldb.com/submit/791921","https://vuldb.com/vuln/358233","https://vuldb.com/vuln/358233/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-9jpj-cph8-w449","url":"https://osv.dev/vulnerability/GHSA-9jpj-cph8-w449"}],"summary":"Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint"}