Description
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administrative access. Additionally, permissive cross-origin resource sharing (CORS) settings may allow tokens to be exposed to unintended origins, increasing the risk of unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 – ≤ 1.10.0 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Langflow OSS - Superuser Token Issuance http/cves/2026/CVE-2026-9103.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- WID-SEC-2026-2410 IBM Langflow Desktop OSS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 4, 2026
- NCSC-2026-0251 Kwetsbaarheden verholpen in IBM Langflow OSS NCSC-NL (Netherlands) · Jul 21, 2026
References
- https://www.ibm.com/support/pages/node/7278926 vendor-advisory patch