CVE-2026-10140

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials, leading to cross-tenant billing and accountability misattribution.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7278209	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

History

25 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) El modo de voz de IBM Langflow OSS 1.0.0 hasta 1.10.0 contiene un manejo inadecuado del estado compartido que permite la reutilización de clientes de API a través de los límites de los inquilinos. Un atacante autenticado puede manipular el estado de la caché para hacer que las solicitudes de otros usuarios sean procesadas utilizando credenciales de API ascendentes incorrectas, lo que lleva a una facturación entre inquilinos y una atribución errónea de la responsabilidad.

Information

Published : 2026-06-30 20:17

Updated : 2026-10-25 21:10

NVD link : CVE-2026-10140

Mitre link : CVE-2026-10140

CVE.ORG link : CVE-2026-10140

JSON object : View

Products Affected

langflow

langflow

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-10140", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10140", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-01T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 3.1}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow OSS", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.10.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-30T20:17:27.007", "references": [{"url": "https://www.ibm.com/support/pages/node/7278209", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials, leading to cross-tenant billing and accountability misattribution."}, {"lang": "es", "value": "El modo de voz de IBM Langflow OSS 1.0.0 hasta 1.10.0 contiene un manejo inadecuado del estado compartido que permite la reutilizaci\u00f3n de clientes de API a trav\u00e9s de los l\u00edmites de los inquilinos. Un atacante autenticado puede manipular el estado de la cach\u00e9 para hacer que las solicitudes de otros usuarios sean procesadas utilizando credenciales de API ascendentes incorrectas, lo que lleva a una facturaci\u00f3n entre inquilinos y una atribuci\u00f3n err\u00f3nea de la responsabilidad."}], "lastModified": "2026-10-25T21:10:00.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C7B74AA-C67C-41BB-8566-76172727777C", "versionEndIncluding": "1.10.0", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}