nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-9130 CVE-2026-9130
HIGH
Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
Record summary
CVE-2026-9130 has a selected CVSS score of 7.1 (high).
Description
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/*, /api/v1/responses, and /api/v2/workflow/*. This vulnerability only affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Langflow OSSBrowse IBM / Langflow OSS | CVE List | 1.0.0 to ≤ 1.10.3 | affected |
References
2ibm.comVendor advisorypatch
https://www.ibm.com/support/pages/node/7282647