CVE-2026-9130

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description An authorization bypass exists in the MemoryComponent that allows authenticated users to access the chat history of other users through session id collision. The retrieve messages() and store message() methods filter by session id but fail to validate ownership of the flow id or user id. This leads to cross-user information disclosure via the following authenticated API endpoints: '/api/v1/run/', '/api/v1/responses', and '/api/v2/workflow/. This issue specifically affects multi-user deployments where LANGFLOW AUTO LOGIN is set to False.

Recommendations Update IBM Langflow OSS to a version later than 1.10.3.