IBMCVE-2026-9130
IBM Langflow OSS: information disclosure
High7.1CVE-2026-9130 · Published Aug 5, 2026 · updated Aug 7, 2026
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/*, /api/v1/responses, and /api/v2/workflow/*. This vulnerability only affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Langflow OSS Product | >= 1.0.0, <= 1.10.3 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-639
More IBM advisories
All IBM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 5 | IBM Langflow OSS: weak cryptography | High7.4 | No fix yet |
| Aug 5 | IBM Langflow OSS: code injection | High8.1 | No fix yet |
| Aug 5 | IBM Langflow OSS: code execution | High8.8 | No fix yet |
| Aug 5 | IBM Langflow OSS: code injection | High8.8 | No fix yet |
| Aug 5 | IBM Langflow OSS: broken cryptography | High7.4 | No fix yet |
| Aug 5 | IBM Langflow OSS: path traversal | Medium6.5 | No fix yet |