CriticalVulnerability
CVE-2026-9103: IBM Langflow OSS unauthorized access through /api/v1/login/auto_login endpoint
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-9103
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 3.2%
Summary
IBM Langflow OSS versions 1.0.0 through 1.10.0 contain CVE-2026-9103, an improper authentication flaw in the /api/v1/login/auto_login endpoint. When AUTO_LOGIN is enabled, which is the default, the endpoint issues long-lived superuser bearer tokens without requiring authentication, which may let an unauthenticated network attacker gain full administrative access. Permissive CORS settings may also expose tokens to unintended origins.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoImproving Fuzzy Robustness in LLM Safety with Automated Red TeamingSimilar attack · OpenAI Alignment Research Blog
- MediumAI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor LabsSimilar attack · Endor Labs Blog
- InfoPOEM: Output-Relative Block-Sparse Attention for Long-Context PrefillingSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoTERM: Target-Free Jailbreak Defense via Entropy-Guided Residual ModulationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoSuppression Is Not Erasure: Mechanistic Analysis and Reactivation Boundaries of Subspace Projection for LoRA Backdoor DefenseSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)