CVE-2026-9130 IBM CVE debrief

Who should care

Users of IBM Langflow OSS 1.0.0 through 1.10.3, especially those with multi-user deployments and LANGFLOW_AUTO_LOGIN=False, should be aware of the authorization bypass vulnerability. Operators, platform administrators, vulnerability management teams, and security teams should verify LANGFLOW_AUTO_LOGIN=False deployments, monitor API endpoints, and restrict access to prevent unauthorized access to chat history and user data.

Technical summary

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent; authenticated users can access chat history of other users via session_id collision. The vulnerability affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints.

Defensive priority

Authenticated users may access chat history of other users; verify LANGFLOW_AUTO_LOGIN=False deployments, monitor API endpoints, and restrict access.

Recommended defensive actions

• Verify LANGFLOW_AUTO_LOGIN=False deployments and restrict access to /api/v1/run/*, /api/v1/responses, and /api/v2/workflow/* endpoints.
• Monitor API endpoints for suspicious activity and implement additional access controls.
• Restrict access to chat history and user data.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The MemoryComponent in IBM Langflow OSS 1.0.0 through 1.10.3 has an authorization bypass vulnerability; verify LANGFLOW_AUTO_LOGIN=False deployments. The vulnerability allows authenticated users to access chat history of other users via session_id collision. Evidence is limited to public CVE and NVD details. Defenders should verify LANGFLOW_AUTO_LOGIN=False deployments, monitor API endpoints, and restrict access.

Official resources