Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-9205 · HIGH · Bugflare

CVE-2026-9205

HIGH

CVE: CVE-2026-9205 - IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() functionSign in to save

Sign in to like · 0

CVSS

7.4

CVSS v3.1

EPSS

0.2%

Exploit Prediction Score

Published

August 5, 2026

Exploitability

EPSS probability 0.2%

Description

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

Weaknesses

CWE-338

Affected Packages

No package data available.

Aliases

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://www.ibm.com/support/pages/node/7282648

Source

Originally published by NVD (nvd.nist.gov).

CVE metadata is aggregated from public vulnerability databases. Scores and descriptions remain attributed to their origin feeds.

Open original on nvd.nist.gov →https://nvd.nist.gov/vuln/detail/CVE-2026-9205