CVE-2026-10700 Missing authorization in Langflow OSS
Attackers can access other users' files via broken access control in Langflow's file handling API, leading to unauthorized data disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-10700?
CVE-2026-10700 is a medium-severity missing authorization vulnerability in Langflow Langflow, published on 30 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files/images/{flow_id}/{file_name} endpoint does not enforce authentication or authorization checks, allowing unauthenticated remote attackers to retrieve image files associated with any flow by specifying a valid flow_id and file_name.Additionally, the /api/v1/files/download/{flow_id}/{file_name} endpoint requires authentication but fails to properly validate ownership of the requested resource. As a result, an authenticated user can access files belonging to other users by supplying arbitrary identifiers, leading to an authorization bypass (IDOR).Successful exploitation may result in unauthorized disclosure of sensitive data, including files stored in private flows. This issue breaks tenant isolation in multi-user deployments.
Weakness: CWE-639
Which versions are affected by CVE-2026-10700?
It affects 1 product.
Products include Langflow Langflow.
How do I fix CVE-2026-10700?
No fix has been published for CVE-2026-10700 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-10700 being exploited?
There is no known exploitation of CVE-2026-10700 in the wild and no public exploit code.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-c6gg-2q9r-m9jw.