CVE-2026-12763
Langflow is vulnerable to authentication bypass and insufficient session expiration
- State
- Published
- Severity
- 4.2 Medium
- Published
- Sep 14, 2026
- Updated
- Sep 15, 2026
- Reserved
- Jun 19, 2026
Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.2 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N | ibm |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
Langflow OSSIBM |
|
References
- https://www.ibm.com/support/pages/node/7286662vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.