Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

IBM Langflow: Unauthenticated Access to Administrative Features

CVE-2026-9103 · published 2 months ago
Summary

IBM Langflow OSS versions 1.0.0 to 1.10.0 have a security issue that allows unauthorized access to administrative features. This can happen if a network attacker uses a feature called auto-login. To protect yourself, update IBM Langflow to the latest version and review your configuration settings, especially those related to auto-login and cross-origin resource sharing.

What to do
  • Update langflow langflow to version 1.10.1 or later.
Affected software
VendorProductAffected versions
ibm langflow oss <= 1.10.0
langflow langflow >= 1.0.0, < 1.10.1
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Original advisory text
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-liv...
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administrative access. Additionally, permissive cross-origin resource sharing (CORS) settings may allow tokens to be exposed to unintended origins, increasing the risk of unauthorized access.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (MITRE)
Exploitation
EPSS 3%
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published17 Jul 2026
Updated19 Sep 2026
First seen17 Jul 2026
Sources
CVE-2026-9103 · NVD
CVE-2026-9103 · MITRE
Track software like this
Free during beta