Langflow: IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Record
- CVE-2026-6542
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- April 30, 2026
- Source last modified
- October 26, 2026
Description
IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models by linking steps together into workflows. This flaw affects versions 1.0.0 through 1.8.4. Any user of the product could point to a workflow that belongs to someone else and read its activity logs and the data saved while its steps were built and run. The same user could also delete that saved build data for another user's workflow. This flaw is rated High.
What to do
- The person who installed or runs Langflow for your organization should check which version is in use. If it is any version from
1.0.0through1.8.4, it is affected by this flaw. - No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it as soon as one is available.
- If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 26, 2026 and reviewed before publishing.