PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Misconfiguration·Updated Sep 18, 2026

CVE-2026-9103 Scanner

CVE-2026-9103 Scanner - Unauthorized Admin Access vulnerability in Langflow OSS

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
3
Times Used
continuous scan runs
5.9k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTO_LOGIN configuration is enabled (enabled by default), which may allow an unauthenticated network attacker to obtain full administrative access. Additionally, permissive cross-origin resource sharing (CORS) settings may allow tokens to be exposed to unintended origins, increasing the risk of unauthorized access.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Langflow OSSby IBM
1.0.0
Updated Sep 26, 2026View on NVD →
Detail

Langflow OSS is a tool designed to help users visualize and control complex data flows. It's frequently used by developers and data scientists aiming to leverage data connections and flow processes. Primarily, this open-source software is intended for those needing scalable visualization and flow manipulation in their projects. The software is efficiently integrated with multiple data sources, making it useful in handling diverse data flow scenarios. Langflow helps users streamline their data processing by offering an intuitive graphical interface. Additionally, it supports various applications by allowing users to manage interconnected process nodes easily.

The identified vulnerability allows unauthorized admin access which results in significant security risks. This flaw enables attackers to obtain a superuser access token without authentication, granting full control over the Langflow instance. This unauthorized access often leads to remote code execution and possible compromise of all connected data sources. The vulnerability is primarily sourced from the configuration setting that allows auto-login, which should not be exposed. Organizations using Langflow OSS need to address this vulnerability to ensure protection from unauthorized access. Given its critical nature, this vulnerability requires immediate attention and rectification.

The vulnerability is exposed due to the setting of `AUTO_LOGIN`, a default configuration which should be disabled. The vulnerable endpoint is `/api/v1/auto_login` which, when accessed, returns a superuser token. The configuration setting in question allows for access without authentication, making it notably dangerous. The vulnerability exploit process is straightforward and does not require any privilege to execute. This nature of access can easily be taken advantage of by malicious entities. Proactive measures, including configuration changes and restricted exposure, can prevent potential exploitation.

Exploiting this vulnerability can lead to complete system compromise. Malicious parties acquiring superuser privileges may cause significant disruptions, including unauthorized execution of code. Critical data, flows, and configurations can be altered or accessed maliciously. The organization may face data breaches and undisclosed access to confidential data. Furthermore, connected data sources and integrated services may also be put at risk due to this unauthorized access. Consequently, maintaining a good security posture is pivotal to prevent such exploits.

REFERENCES

Solution Advice
  • Disable `AUTO_LOGIN` by setting `LANGFLOW_AUTO_LOGIN=false` to eliminate unauthorized superuser access.
  • Configure strong superuser credentials for additional security.
  • Upgrade to a fixed release of Langflow to mitigate the vulnerability.
  • Restrict network exposure of the management interface to prevent unauthorized access.
  • Implement strict access controls and regular security audits to detect any unauthorized activities.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.