{"id":"CVE-2026-102590","kind":"vulnerability","aliases":["CVE-2026-102590"],"related":[],"title":"Langflow: authenticated users can make server requests and read sensitive data","description":"IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability.","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery flaw. A logged-in attacker can make the server send requests to internal or external addresses and obtain sensitive information.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","langflow","self-hosted"],"not_affected_if":["managed-hosting","version-above-1.12.3"],"how_to_check":"- Check the installed Langflow version with `langflow --version` or the package manager, and compare against `1.12.3`.","fix":"- Move Langflow OSS to a version later than `1.12.3`; the sources do not name the exact fixed release.","status":"open","published_at":"2026-10-29T16:17:39+00:00","first_seen_at":"2026-10-29T16:25:54+00:00","triaged_at":"2026-10-29T16:31:54+00:00","updated_at":"2026-10-29T16:31:54+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-29T16:31:54Z","model":"claude-haiku-5-5","output":{"fix":"- Move Langflow OSS to a version later than `1.12.3`; the sources do not name the exact fixed release.","reach":"network","title":"Langflow: authenticated users can make server requests and read sensitive data","impact":"medium","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery flaw. A logged-in attacker can make the server send requests to internal or external addresses and obtain sensitive information.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["langflow","self-hosted","ai-agents"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads sensitive data via server-side requests","analyst_note":"Check the IBM security bulletin or NVD entry for the fixed version and the affected feature or endpoint.","how_to_check":"- Check the installed Langflow version with `langflow --version` or the package manager, and compare against `1.12.3`.\n- unknown for other checks; the sources do not say which feature or endpoint is involved.","plain_action":"","needs_analyst":true,"not_affected_if":["managed-hosting","version-above-1.12.3"],"who_is_affected":"Teams running self-hosted IBM Langflow OSS from 1.0.0 through 1.12.3 where users can log in. The sources do not say which Langflow feature triggers the request, so exposure beyond that version range is unknown. Teams on managed hosting or versions above 1.12.3 can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000696,"input_tokens":4099,"output_tokens":572,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-102590':14A,17A '-2026':13A,16A '1.0.0':32B,66C '1.12.3':34B,68C 'address':58B 'agent':20B 'ai':19B,22B 'ai-ag':18B 'ai-tool':21B 'allow':70C 'attack':47B,74C 'authent':2A,73C 'contain':35B 'could':69C 'cve':12A,15A 'data':11A 'due':79C 'extern':57B 'flaw':42B 'forgeri':41B,86C 'host':27B 'ibm':28B,63C 'inform':62B,78C 'intern':55B 'langflow':1A,24B,29B,64C 'log':45B 'logged-in':44B 'make':5A,49B 'obtain':60B,76C 'oss':30B,65C 'read':9A 'remot':72C 'request':7A,40B,53B,85C 'self':26B 'self-host':25B 'send':52B 'sensit':10A,61B,77C 'server':6A,38B,51B,83C 'server-sid':37B,82C 'side':39B,84C 'tool':23B 'user':3A 'version':31B 'vulner':87C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted IBM Langflow OSS from 1.0.0 through 1.12.3 where users can log in. The sources do not say which Langflow feature triggers the request, so exposure beyond that version range is unknown. Teams on managed hosting or versions above 1.12.3 can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T16:17:39+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-102590","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102590","severity":null,"published_at":"2026-10-29T16:17:39+00:00","modified_at":"2026-10-29T16:17:40+00:00","first_seen_at":"2026-10-29T16:25:54+00:00","fetched_at":"2026-10-29T16:25:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}