Executive brief
IBM Langflow is an open-source platform for building AI workflows and applications. The password reset feature fails to verify the user's current password before allowing a change, permitting authenticated users to reset their own accounts without knowing the original credentials. This weakness could allow an attacker who has compromised a user session to permanently lock out the legitimate user, and combined with the lack of password complexity requirements, enables brute-force attacks on reset accounts.
Technical details
The password reset endpoint in Langflow's user management API accepts a current password field in the request body but does not verify it against the stored credential before applying the change (CWE-287: Improper Authentication). The vulnerability requires authentication to the application, but once authenticated, an attacker can change their own account password to any value without providing the correct existing password and without password complexity enforcement. The endpoint correctly restricts callers to modifying only their own account, but the missing current password verification fundamentally weakens the authentication control. Patch is available in version 1.10.3 or later.
Affected products
- IBM Langflow OSS 1.0.0 through 1.10.2
Timeline
- 2026-09-08: disclosed
- 2026-09-08: patched: Fixed in version 1.10.3