Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Record
- CVE-2026-10547
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 5, 2026
- Source last modified
- October 23, 2026
Description
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized workflow execution, or denial of service.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models by connecting steps into workflows. This flaw affects versions 1.0.0 through 1.10.3. It is in an older part of the product, now being phased out, that builds and runs the steps of a workflow. That part does not properly check who owns a workflow. Anyone with an account on your Langflow could push their own data into a shared storage area used for any workflow, including other users' workflows. This could mix up other users' work, run workflows without permission, or make the service stop working. This flaw is rated High.
What to do
- If you or someone in your organization installed and runs Langflow, find out which version it is. Any version from
1.0.0through1.10.3is affected. - No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release. Install it as soon as it is available.
- If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 23, 2026 and reviewed before publishing.