CVE-2026-9103 Unauthenticated Superuser Token Issuance via Auto-Login Endpoint
Unauthenticated attackers can obtain superuser tokens via the auto-login endpoint, gaining full administrative access to the application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-9103?
CVE-2026-9103 is a critical authentication bypass vulnerability in Langflow Langflow, published on 17 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administrative access. Additionally, permissive cross-origin resource sharing (CORS) settings may allow tokens to be exposed to unintended origins, increasing the risk of unauthorized access.
Weakness: CWE-306
Which versions are affected by CVE-2026-9103?
It affects 1 product.
Products include Langflow Langflow.
How do I fix CVE-2026-9103?
No fix has been published for CVE-2026-9103 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-9103 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-9103 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-88m4-9v35-3pc9.