CVE-2026-10140 - Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem · CoreCVE

Back Back to CVE browser

CRITICAL

Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

Published Jun 30, 2026

9.6

CRITICAL

CVSS 3.1

EPSS 0.35%

Description

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials, leading to cross-tenant billing and accountability misattribution.

Affected products

Vendor IBM Product Langflow OSS Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  <=1.10.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.0.0	affected	<=1.10.0

Remediation

Vendor solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.1 https://pypi.org/project/langflow/

Weaknesses (1)

CWE-639

Authorization Bypass

References (1)

https://www.ibm.com/support/pages/node/7278209
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://www.ibm.com/support/pages/node/7278209		vendor-advisorypatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Jun 30, 2026

Updated Aug 11, 2026

Reserved May 29, 2026

Link CVE-2026-10140

CISA Vulnrichment

Updated Jul 1, 2026

Status Analyzed

Modified Aug 11, 2026

Link CVE-2026-10140

Severity n/a

Public date n/a

Links CVE-2026-10140