CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.10.3 are susceptible to an authorization bypass vulnerability that allows authenticated users to access other users' chat histories due to session_id collisions. This issue arises from inadequate validation of flow_id and user_id ownership in the MemoryComponent, leading to potential cross-user information disclosure through various API endpoints. Organizations utilizing multi-user deployments with LANGFLOW_AUTO_LOGIN set to False should prioritize remediation to protect sensitive user data.
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via session_id collision. The MemoryComponent.retrieve_messages and store_message methods filter on session_id without validating flow_id or user_id ownership, enabling cross-user information disclosure through multiple authenticated API endpoints including /api/v1/run/*, /api/v1/responses, and /api/v2/workflow/*. This vulnerability only affects multi-user deployments with LANGFLOW_AUTO_LOGIN=False.
Related CVEs
Other vulnerabilities affecting the same vendor(s)