CVE-2026-10560: IBM Langflow OSS: Missing Authentication in Build Endpoints
IBM has disclosed CVE-2026-10560, a missing authentication weakness in IBM Langflow OSS versions 1.0.0 through 1.9.6. According to the record, an unauthenticated party can read build event data or cancel jobs when a valid job identifier is known, leading to information disclosure and denial of service. NVD rates it critical with CVSS 3.1 score 9.1, while IBM's own score is 8.2.
Overview
IBM has disclosed CVE-2026-10560, a missing authentication weakness in IBM Langflow OSS. According to the record, the flaw affects endpoints under /api/v1/build_public_tmp/ and allows an unauthenticated party to act on build jobs when a valid job identifier is known. The CNA is IBM PSIRT and the weakness is classified as CWE-287 (Improper Authentication).
Impact
The record states that the flaw can be used to read build event data and to cancel jobs, which corresponds to information disclosure and denial of service. The NVD vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H indicates network reachability, low attack complexity, no privileges or user interaction required, and high confidentiality and availability impact, with no integrity impact.
Affected products and versions
- Product: Langflow Langflow (IBM Langflow OSS)
- Range listed: from 1.0.0 through 1.9.6, inclusive
- Fixed version: not listed in the record. Consult the IBM support bulletin for remediation details.
Exploitation status
This CVE is not listed in the CISA KEV catalog in the data provided, and no confirmed exploitation appears in the sources consulted. The EPSS probability is 0.00484 with a percentile of 0.3997, which estimates the likelihood of exploitation activity but does not confirm it.
Remediation and mitigation
- Inventory all Langflow OSS deployments and determine whether any run a version within the 1.0.0 to 1.9.6 range.
- Follow the guidance in the IBM support bulletin and apply the vendor-provided fix for your version once you have confirmed it.
- Until patching is complete, restrict network exposure of Langflow instances, limit access to build-related endpoints to trusted networks, and add authentication controls in front of the service where feasible.
- Treat job identifiers as sensitive and avoid sharing them beyond the parties that need them.
Detection guidance
- Review web server and application logs for requests to build-related public endpoints, especially from unknown sources.
- Look for unexpected job cancellations or changes in build state that were not initiated by authorized users.
- Correlate unusual access to build data with the exposure window of each affected instance.
Limitations of the available information
The record does not include a fixed version, patch details, or any exploitation telemetry beyond KEV status and EPSS. The reason for the difference between the NVD score (9.1) and the IBM score (8.2) is not stated. The exposed data is described only as build event data, so the exact scope of disclosure is unknown.
Frequently asked questions
What is CVE-2026-10560?
It is a missing authentication weakness in IBM Langflow OSS versions 1.0.0 through 1.9.6, affecting endpoints under /api/v1/build_public_tmp/. According to the record, it can expose build event data and allow job cancellation.
Is this vulnerability being exploited in the wild?
The CVE is not listed in the CISA KEV catalog in the data provided, and no confirmed exploitation appears in the sources consulted.
What should administrators do now?
Inventory affected Langflow OSS deployments, follow the IBM support bulletin for the vendor fix, and restrict network exposure and access to build endpoints until patching is complete.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.