cyfenced.com →

[ CVE-2026-9205 · Published 5 Aug 2026 ]

Langflow: Weak Fernet Key via random.seed()

CVSS 7.4 EPSS <1%Fix available

[ Description ]Official description

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

[ Fixes ]Fixes and patches

  • langflow 1.10.1Fixed version · GitHub Advisories · pip package langflow: upgrade to 1.10.1 or later (affected <= 1.10.0)

[ Packages ]Affected open-source packages

[ References ]References