CVE-2026-9130: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without validating flowid or userid ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/, /api/v1/responses, and /api/v2/workflow/. This vulnerability only affects multi-user deployments with LANGFLOWAUTOLOGIN=False.
Other sources
Langflow OSS contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without validating flowid or userid ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/, /api/v1/responses, and /api/v2/workflow/. This vulnerability only affects multi-user deployments with LANGFLOWAUTOLOGIN=False.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.11.0 - Configuration
This vulnerability only affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False. For single-user or where possible, change LANGFLOW_AUTO_LOGIN to avoid the affected multi-user configuration (e.g., ensure it is not set to False in multi-user deployments).
Langflow OSS LANGFLOW_AUTO_LOGIN = False - Compensating control
For multi-user deployments where LANGFLOW_AUTO_LOGIN=False, restrict access to the affected API endpoints (/api/v1/run/*, /api/v1/responses, /api/v2/workflow/*) to prevent authenticated users from exploiting session_id collision to read other users' chat history.