{"id":"CVE-2026-110245","kind":"vulnerability","aliases":["CVE-2026-110245"],"related":[],"title":"Langflow: improper authentication lets remote attackers obtain sensitive information","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.4 fail to properly check authentication. A remote attacker can obtain sensitive information from an affected instance.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"langflow","fixed":["1.12.5"],"affected":">= 1.0.0, <= 1.12.4","ecosystem":"pypi"}],"ecosystems":[],"tags":["ai-apps","ai-tooling","langflow","self-hosted"],"not_affected_if":["version-outside-range"],"how_to_check":"Run pip show langflow (or check the version in the UI). Versions 1.0.0 through 1.12.4 are affected; 1.12.5 or later is fixed. Unauthenticated, so any instance reachable over the network is exposed.","fix":"Upgrade Langflow OSS to 1.12.5 or later (IBM bulletin 7293016). Back up first and follow IBM's upgrade instructions.","status":"open","published_at":"2026-10-29T16:17:56+00:00","first_seen_at":"2026-10-29T16:25:56+00:00","triaged_at":"2026-10-29T16:29:42+00:00","updated_at":"2026-10-29T16:30:38+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-10-29T16:29:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Langflow: improper authentication lets remote attackers obtain sensitive information","impact":"medium","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.4 fail to properly check authentication. A remote attacker can obtain sensitive information from an affected instance.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["langflow","self-hosted","ai-apps"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Sensitive information is exposed to a remote attacker","analyst_note":"Check the NVD entry and the IBM advisory for the affected endpoint, required authentication, and the fixed version.","how_to_check":"- Check the installed Langflow version (for example with `pip show langflow`) and see whether it falls within `1.0.0` through `1.12.4`.\n- Confirm whether the instance is reachable from the internet.","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Teams that run Langflow OSS in the affected version range and expose it to a network reachable by attackers. The sources do not say which endpoints or configurations are involved, so the exact exposure is unknown. Instances outside the listed version range are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000659,"input_tokens":4086,"output_tokens":501,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the NVD entry and the IBM advisory for the affected endpoint, required authentication, and the fixed version.","search":"'-110245':12A,15A '-2026':11A,14A '1.0.0':31B,53C '1.12.4':33B,55C 'affect':48B 'ai':18B,21B 'ai-app':17B 'ai-tool':20B 'allow':57C 'app':19B 'attack':6A,41B,60C 'authent':3A,38B,68C 'check':37B 'could':56C 'cve':10A,13A 'due':65C 'fail':34B 'host':26B 'ibm':27B,50C 'improp':2A,67C 'inform':9A,45B,64C 'instanc':49B 'langflow':1A,16A,23B,28B,51C 'let':4A 'obtain':7A,43B,62C 'oss':29B,52C 'proper':36B 'remot':5A,40B,59C 'self':25B 'self-host':24B 'sensit':8A,44B,63C 'tool':22B 'version':30B","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted Langflow OSS 1.0.0 through 1.12.4 where the instance can be reached over the network. IBM says no login is needed and sensitive information can be read, but does not say which endpoint or data. Instances on 1.12.5 or later can skip it.","tier":"B","verified":{"fix":{"at":"2026-10-29T16:30:38Z","by":"analyst","doc":"https://www.ibm.com/support/pages/node/7293016","run_id":1047},"products":{"at":"2026-10-29T16:30:38Z","by":"analyst","doc":"https://www.ibm.com/support/pages/node/7293016","run_id":1047},"who_affected":{"at":"2026-10-29T16:30:38Z","by":"analyst","doc":"https://www.ibm.com/support/pages/node/7293016","run_id":1047}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T16:17:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110245","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110245","severity":null,"published_at":"2026-10-29T16:17:56+00:00","modified_at":"2026-10-29T16:17:56+00:00","first_seen_at":"2026-10-29T16:25:56+00:00","fetched_at":"2026-10-29T16:25:56+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-110245:1047","url":null,"severity":null,"published_at":"2026-10-29T16:30:38+00:00","modified_at":"2026-10-29T16:30:38+00:00","first_seen_at":"2026-10-29T16:30:38+00:00","fetched_at":"2026-10-29T16:30:38+00:00","note":"IBM bulletin 7293016 (Oct 19) lists it: CWE-287, CVSS 7.5 PR:N, confidentiality only, affected 1.0.0-1.12.4, fix 1.12.5. IBM names no endpoint or data exposed; no workaround for this CVE (MCP stdio settings relate to other CVEs). No exploitation or PoC found; social search skipped."}],"documents":[{"id":17746,"url":"https://www.ibm.com/support/pages/node/7293016","title":"IBM Security Bulletin: Langflow OSS is affected by multiple vulnerabilities (19 Oct 2026)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":17747,"url":"https://vibeincidents.com/incidents/langflow-ibm-bulletin-14-cves-2026-10/","title":"VibeIncidents: IBM discloses 14 Langflow CVEs","kind":"blog","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}