{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aibmlangflow/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:langflow:*:*:*:*:*:*:*:*"],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Langflow OSS (1.0.0-1.12.4)"],"_cs_severities":["high"],"_cs_tags":["web-application","authentication-bypass","authorization-bypass","cve-2026-107366"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM Langflow OSS versions 1.0.0 through 1.12.4 contain a critical authorization vulnerability within three message endpoints. The root cause is a failure to implement ownership verification during message processing requests. An authenticated user can exploit these endpoints to perform operations on messages and sessions belonging to other users. This vulnerability allows for unauthorized bulk deletion of message history, the modification of message content to facilitate prompt injection attacks, and the hijacking of active conversation sessions through session ID reassignment. Because this flaw exists in the application API, it impacts the integrity of user data and the confidentiality of ongoing workflows within the Langflow environment. Defenders should focus on monitoring for anomalous API requests targeting message management endpoints.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in unauthorized modification or deletion of communication records and full takeover of conversation sessions. This impacts any enterprise sector utilizing Langflow for LLM workflow orchestration, potentially leading to the leakage of sensitive internal prompts or the manipulation of AI-driven decision-making processes.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade IBM Langflow OSS to a version beyond 1.12.4 as soon as the vendor provides a patch.\u003c/li\u003e\n\u003cli\u003eAudit API access logs for high-frequency or bulk requests to message endpoints that do not correspond to the authenticated user's standard activity patterns.\u003c/li\u003e\n\u003cli\u003eImplement strict network-level access controls for the Langflow management API to limit the exposure of the vulnerable endpoints to authorized administrative subnets only.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T00:30:56Z","date_published":"2026-10-20T00:30:56Z","id":"https://feed.craftedsignal.io/briefs/2026-10-langflow-auth-bypass/","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to an authorization bypass in message endpoints that enables unauthorized session hijacking, message deletion, and prompt injection.","title":"IBM Langflow OSS Authorization Bypass Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-langflow-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ibm:langflow:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}