Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 – ≤ 1.11.5 | — |
Advisories 2
- WID-SEC-2026-3239 Langflow OSS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
- WID-SEC-2026-3096 Langflow OSS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
References
- https://www.ibm.com/support/pages/node/7286662 vendor-advisory patch