Executive brief
IBM Langflow OSS, a tool used for building AI applications, contains a flaw that allows anyone on the internet to create an unlimited number of user accounts without permission. If the system is configured to activate new users automatically, an attacker can use these unauthorized accounts to gain full control over the server. This could lead to the theft of sensitive AI data, service disruptions, or the use of the server for further malicious activities.
Technical details
A missing authentication vulnerability (CWE-306) exists in the user registration API of IBM Langflow OSS versions 1.0.0 through 1.10.0. An unauthenticated remote attacker can exploit this by sending requests to the registration endpoint to create arbitrary accounts. If the 'NEW_USER_IS_ACTIVE' configuration is set to true, these accounts are immediately functional, allowing the attacker to authenticate and access internal endpoints capable of remote code execution (RCE). Even if accounts are not immediately active, the flaw can be used for resource exhaustion or to establish dormant accounts. The vulnerability is addressed in version 1.10.1.
Affected products
- IBM Langflow OSS 1.0.0 through 1.10.0
Timeline
- 2026-07-02: disclosed: Initial publication by IBM
- 2026-07-17: advisory: NVD publication date
- 2026-07-17: patched: Remediation available in version 1.10.1