CVE-2026-9103: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authenti
Summary
IBM Langflow OSS versions 1.0.0 through 1.10.0 have a critical vulnerability in the /api/v1/login/auto_login endpoint that allows unauthenticated attackers to gain full administrative access by obtaining long-lived superuser bearer tokens (special credentials that prove you have admin privileges) when AUTO_LOGIN is enabled by default. The vulnerability is made worse by overly permissive CORS settings (rules controlling which websites can access the application), which can expose these tokens to unintended websites.
Vulnerability Details
9.8(critical)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
network
low
none
none
July 17, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-9103
First tracked: July 17, 2026 at 08:07 PM
Classified by LLM (prompt v3) · confidence: 95%