GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

The vulnerability was reported to IBM by Harish Kolla (GitHub: Har1sh-k (https://github.com/Har1sh-k)).

2 vulnerability records and advisories credit this contributor.

CVE-2026-9198
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVE-2026-10140
Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem