Executive brief
IBM Langflow OSS, a tool used for building and deploying AI workflows, contains a critical security flaw in its webhook authentication. An unauthorized attacker can bypass security checks to trigger and run any automated workflow as if they were the owner. This could allow an attacker to execute malicious code on the server or cause a complete service outage.
Technical details
A vulnerability in Langflow's webhook authentication logic exists where the system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False, which is the default setting. A remote, unauthenticated attacker who knows or discovers a flow's UUID can execute that flow with the privileges of the owner. Depending on the components within the triggered flow, this can lead to Remote Code Execution (RCE) or Denial of Service (DoS). The issue is caused by a failure to enforce authentication checks in the webhook endpoint handler. Users should upgrade to Langflow OSS version 1.10.1 to remediate this vulnerability.
Affected products
- IBM Langflow OSS 1.0.0 through 1.10.0
Timeline
- 2026-07-02: disclosed: Initial publication of the security bulletin by IBM.
- 2026-07-17: advisory: NVD published the CVE record.