CVE-2026-9130: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows a

IBM Langflow OSS (an open-source tool for building AI applications) versions 1.0.0 through 1.10.3 have an authorization bypass vulnerability in the MemoryComponent, which stores conversation data. Authenticated users can view other users' chat histories by exploiting session_id collision (when different users accidentally get the same session identifier), because the system doesn't properly verify that a user owns the data they're requesting. This only affects systems with multiple users where automatic login is disabled.