IBM Langflow 1.0.0-1.10.3 POST /api/v1/build/{flow_id}/vertices OW Validation Leak
CVE-2026-10547 Published on August 5, 2026

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized workflow execution, or denial of service.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-10547 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and a small impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
HIGH
Availability Impact:
LOW

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-10547 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2026-10547

Want to know whenever a new CVE is published for IBM Langflow Oss? stack.watch will email you.

 

Affected Versions

IBM Langflow OSS: