CVE-2026-10129 is a SSRF protection bypass vulnerability in IBM Langflow OSS (versions 1.0.0 through 1.9.3) affecting the API Request component. An authenticated attacker with the flow author role can enable the follow_redirects parameter and provide a public URL that redirects to internal or localhost addresses. The application validates only the initial URL but fails to re-validate redirect targets, allowing attackers to reach internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be protected by SSRF defenses. This can result in unauthorized disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data. The CVSS v3.1 score is 8.5 (High severity), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, low integrity impact, and no availability impact. No official patch or remediation is currently documented.

Successful exploitation allows an authenticated low-privilege user to bypass SSRF protections and access internal network resources and sensitive data that should be inaccessible. This can lead to disclosure of credentials, tokens, internal API responses, and administrative panel information, potentially compromising system confidentiality and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or monitor the use of the follow_redirects parameter in the API Request component and limit flow author role privileges. Consider network-level controls to restrict access to internal services from the application server. Follow IBM's official advisories for updates and remediation instructions.