Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Record
- CVE-2026-8446
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 5, 2026
- Source last modified
- October 24, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects are configured with auth_type=oauth .
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.10.3. The problem is in the MCP composer, a part of the product that handles connections using the Model Context Protocol (a standard way for AI tools to connect). Your setup is affected when that feature is turned on, which it is by default, and your projects are set up to use OAuth sign-in (signing in through another account service). In that setup, an attacker could get around the login check. This flaw is rated High.
What to do
- The person who installed or runs Langflow for your organization should check which version you use. Versions 1.0.0 through 1.10.3 are affected.
- Ask them to also check whether the MCP composer feature is turned on, which it is by default, and whether any projects use OAuth sign-in. Both together make your setup affected.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release and install it as soon as it is available.
- If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 24, 2026 and reviewed before publishing.