Bottom line: Authenticated attackers can gain superuser privileges in IBM Langflow OSS; patch is available.
A critical vulnerability in IBM Langflow OSS enables authenticated attackers to escalate their privileges to superuser level. The update to version 1.10.1 fixes the flaw.
IBM Langflow OSS contains a critical privilege escalation vulnerability that allows authenticated attackers to escalate their privileges to superuser level. The flaw is located at the access control mechanism level and allows an attacker with regular credentials to obtain administrative access to the application.
For CISOs, this poses a significant risk, particularly in environments where Langflow is used for business-critical LLM workflows. An attacker with superuser privileges gains full control over the platform, including model configurations, data flows, and stored credentials.
The update to version 1.10.1 fixes the vulnerability. Systems using Langflow should be updated immediately. When inventorying, special attention should be paid to deployments in production environments and those with access to sensitive data.
Source: www.security-insider.de · Published 28 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification through Lumi News Pipeline v1.7.3.