Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain…

Who is affected

Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.10.0 when Langflow is set up with its default settings. An attacker who can reach Langflow over the network can combine two features without logging in: an automatic login feature that hands full administrator access to anyone who asks, and a feature that checks code by running it. Together these let the attacker take full control of the computer running Langflow. This flaw is rated Critical. It is on CISA's Known Exploited Vulnerabilities list, which means attacks using it have been seen.

What to do

1. If someone in your organization installed and runs Langflow, ask that person to check which version is in use. Any version from 1.0.0 through 1.10.0 is affected.
2. No fixed version is named for this flaw yet, so that person should check the vendor advisory linked on this page for a fixed release and install it as soon as one is available.
3. If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update will be done.
4. Because attacks using this flaw have been seen, treat this as urgent rather than waiting for a routine update.

Analysis written from the source record as of October 24, 2026 and reviewed before publishing.