Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- Critical, CVSS 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-9103
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 17, 2026
- Source last modified
- October 24, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administrative access. Additionally, permissive cross-origin resource sharing (CORS) settings may allow tokens to be exposed to unintended origins, increasing the risk of unauthorized access.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.10.0. It is in the automatic login feature, which is turned on by default. When that feature is on, an attacker who can reach Langflow over a network could get full administrator access without logging in. In addition, loose settings about which other websites may talk to Langflow could let access keys leak to websites they were never meant for. This flaw is rated Critical.
What to do
- Find out whether anyone in your organization runs Langflow, and who installed it or looks after it: a staff member, a volunteer, or an IT provider or vendor.
- If you run it yourselves, the person who installed it should check whether your version is 1.0.0 through 1.10.0 and whether the automatic login feature is on, since it is on unless someone turned it off.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as it is available.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.