CVE-2026-9130 — Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/*, /api/v1/responses, and /api/v2/workflow/*. This vulnerability only affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.3

CWE

No CWE identifiers supplied.

References

https://www.ibm.com/support/pages/node/7282647

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.