CPE
IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to an authorization bypass in message endpoints that enables unauthorized session hijacking, message deletion, and prompt injection.