CVE-2026-10129 is a SSRF protection bypass vulnerability in IBM Langflow OSS (versions 1.0.0 through 1.9.3). The issue arises because the application validates only the initial URL in the API Request component but does not re-validate the destinations of HTTP redirects when the follow_redirects parameter is enabled. An authenticated attacker with the flow author role can supply a public URL that redirects to internal or localhost addresses, thereby accessing internal HTTP services, cloud metadata endpoints, and private network resources that should be protected. This can lead to disclosure of sensitive information such as credentials, tokens, internal API responses, and administrative panel data.

Successful exploitation allows an attacker with low-level authenticated access to bypass SSRF protections and reach internal network resources that are normally inaccessible. This can result in disclosure of sensitive information including credentials, tokens, internal API data, and administrative panel information. The confidentiality impact is high, integrity impact is low, and availability is not affected.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check IBM's vendor advisory for current remediation guidance. Until a fix is released, restrict or monitor the use of the follow_redirects parameter in the API Request component and limit flow author role privileges where possible to reduce risk.