What is the CVSS score of CVE-2026-10700?

CVE-2026-10700 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2026-10700?

Yes, a patch is available for CVE-2026-10700. Update the affected software to the latest version immediately.

IBM Langflow OSS CVE-2026-10700

EUVD-2026-51247 MEDIUM

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-07-30 ibm

GHSA-c6gg-2q9r-m9jw

IBM Authentication Bypass Information Disclosure Langflow Oss

6.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

The unauthenticated image endpoint (the more severe of the two flaws) requires no credentials, network-accessible, low complexity, and yields high confidentiality impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 17:56 vuln.today

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /api/v1/files/images/{flow_id}/{file_name} endpoint does not enforce authentication or authorization checks, allowing unauthenticated remote attackers to retrieve image files associated with any flow by specifying a valid flow_id and file_name.Additionally, the /api/v1/files/download/{flow_id}/{file_name} endpoint requires authentication but fails to properly validate ownership of the requested resource. As a result, an authenticated user can access files belonging to other users by supplying arbitrary identifiers, leading to an authorization bypass (IDOR).Successful exploitation may result in unauthorized disclosure of sensitive data, including files stored in private flows. This issue breaks tenant isolation in multi-user deployments.

AnalysisAI

Broken access control in IBM Langflow OSS 1.0.0-1.8.4 exposes private flow files through two distinct endpoint flaws: the image retrieval endpoint enforces no authentication whatsoever, allowing unauthenticated remote attackers to access any user's image files given a valid flow ID and filename; separately, the file download endpoint, while requiring authentication, fails to validate resource ownership, enabling any authenticated user to access files belonging to other tenants via IDOR. Both flaws break tenant isolation in multi-user deployments and result in unauthorized disclosure of sensitive data. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify exposed Langflow OSS API

Delivery

Enumerate or guess valid flow_id values

Exploit

Send unauthenticated GET to /api/v1/files/images/{flow_id}/{file_name}

Execution

Retrieve private image files from victim flows

Impact

Repeat across flow IDs to harvest sensitive data

Access

Identify exposed Langflow OSS API

Delivery

Enumerate or guess valid flow_id values

Exploit

Send unauthenticated GET to /api/v1/files/images/{flow_id}/{file_name}

Execution

Retrieve private image files from victim flows

Impact

Repeat across flow IDs to harvest sensitive data

Vulnerability AssessmentAI

Exploitation	Two distinct exploitation conditions exist. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The official CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, score 6.5) reflects the authenticated IDOR variant, but understates risk for the unauthenticated image endpoint, which is effectively PR:N and would score 7.5. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An unauthenticated attacker identifies a publicly accessible IBM Langflow OSS instance, then enumerates or guesses flow_id values - potentially gleaned from application responses, shared links, or brute-force - and directly issues HTTP GET requests to /api/v1/files/images/{flow_id}/{file_name} to retrieve image files from private flows belonging to any user. Separately, an insider or low-privilege account holder substitutes another user's flow_id into requests to /api/v1/files/download/ to access private documents, datasets, or model artifacts stored in other tenants' flows. …
Remediation	Apply the vendor-released patch per IBM Security Advisory at https://www.ibm.com/support/pages/node/7279675. … Detailed patch versions, workarounds, and compensating controls in full report.