CVE-2026-105698: Langflow Cross-User Flow Access and Vertex Execution Vulnerability
Summary
CVE-2026-105698: Before Langflow 1.10.1, two deprecated but still-routed endpoints in the chat API did not check that the authenticated caller owns the flow referenced in the URL path: - POST /api/v1/build/{flow_id}/vertices (retrieve_ve... Affects langflow versions >= 1.0.0, < 1.10.1. Fixed in 1.10.1. How to fix ↓
Also tracked for
- langflow-base · PyPI
The same CVE-2026-105698 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Langflow is an open-source framework that allows users to build and manage flow-based applications. It provides a user-friendly interface for creating complex workflows by connecting various components. However, prior to version 1.10.1, Langflow contained vulnerabilities in its API that allowed authenticated users to access and execute vertices of flows owned by other users, compromising the confidentiality and integrity of private data.
Vulnerability Detail
The vulnerability arises from two deprecated API endpoints in Langflow that did not enforce ownership checks for flow access. Authenticated users could exploit this flaw by sending requests to endpoints that allowed them to retrieve and execute vertices from another user's flow, leading to unauthorized access to sensitive information and potential manipulation of the victim's flow execution history. The issue was present in all versions from 1.0.0 to 1.10.0, with the vulnerability being fixed in version 1.10.1.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.10.1
This is the first release that contains the fix.
pip install --upgrade "langflow==1.10.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, a temporary workaround is to block the vulnerable endpoints at a reverse proxy level. Specifically, you can restrict access to the following routes: POST /api/v1/build/*/vertices and POST /api/v1/build/*/vertices/*.
Conclusion
In summary, CVE-2026-105698 represents a significant vulnerability in Langflow that allows unauthorized access to user flows. It is crucial for users to upgrade to version 1.10.1 or later to mitigate this risk. Implementing the suggested workarounds can provide temporary relief until an upgrade is possible.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-105698 is a vulnerability in Langflow that allows authenticated users to access and execute vertices of flows owned by other users without proper authorization.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can lead to unauthorized access to private flow structures and outputs, compromising confidentiality and integrity.
If you cannot upgrade, you should implement a reverse proxy to block access to the vulnerable API endpoints as a temporary measure.
The CVSS score of this vulnerability is 5.4, indicating a moderate level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
