Langflow OSS: Improper access control in vertex result cache
Summary
IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an improper access control flaw in the vertex result caching subsystem. A remote attacker with a low-privilege authenticated account can obtain sensitive information or inject malicious data into cached results. No user interaction is required, so the risk is mainly relevant for multi-user Langflow deployments.
Affected
- IBM Langflow OSS 1.0.0 through 1.12.2
Fixed in
- Upgrade to IBM Langflow OSS 1.12.3 or later (1.12.3 is the remediation release named by IBM; 1.12.4 was released later)
Workaround
Unknown. The reviewed excerpt of the IBM bulletin does not list a workaround. Third-party sources suggest restricting access to the caching subsystem and monitoring cache access logs; this is not confirmed by the vendor.
Exploitation
- No exploitation in the wild reported for this CVE in the sources reviewed.
- CISA SSVC assessment: exploitation none, automatable no, technical impact total.
- A third-party aggregator lists the CVE as not in the CISA KEV catalogue; not verified directly.
- No public proof-of-concept found.
Our recommendation
- Inventory all Langflow OSS instances and their versions.
- Upgrade instances on 1.0.0 to 1.12.2 to version 1.12.3 or later.
- Until patched, restrict network access, review user accounts, and disable auto-login where it is not needed.
- Monitor access and cache logs for unusual activity.
- Confirm the fixed version and patch notes in the full IBM bulletin.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- IBM Security Bulletin: Langflow OSS is affected by multiple vulnerabilities www.ibm.com
- OSV: CVE-2026-97680 osv.dev
- GBHackers: IBM patches multiple Langflow OSS flaws gbhackers.com
- Strix: CVE-2026-97680 www.strix.ai
- OpenCVE: CVE-2026-97680 app.opencve.io
- VulDB: CVE-2026-97680 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 14:02.
Original description (NVD)
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.