{"action":"Upgrade langflow to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"}],"component":"langflow","cve_ids":["CVE-2026-6598"],"ecosystem":"PyPI","epss":0.00152,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-9jpj-cph8-w449","id":"tcs_01M5KH083E9AKE35T7B2BFE4WT","modified_at":"2026-07-13T16:32:01.886629772Z","published_at":"2026-07-13T15:02:51.594454Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2568","https://nvd.nist.gov/vuln/detail/CVE-2026-6598","https://github.com/langflow-ai/langflow/commit/45325f6376309a91f5017fa033a96c09c7e295e3","https://gist.github.com/chenhouser2025/77adb3486c06c635ae4b09a3eaf90213","https://github.com/langflow-ai/langflow","https://vuldb.com/submit/791921","https://vuldb.com/vuln/358233","https://vuldb.com/vuln/358233/cti","https://pypi.org/project/langflow","https://github.com/advisories/GHSA-9jpj-cph8-w449"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-2568","url":"https://osv.dev/vulnerability/PYSEC-2026-2568"}],"summary":"Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint"}