CVE-2026-10140 is an authorization bypass vulnerability (CWE-639) in IBM Langflow OSS versions 1.0.0 through 1.10.0 voice mode. The issue arises from improper handling of shared state that enables reuse of API clients across different tenants. An authenticated attacker can exploit this by manipulating cache state, causing requests from other users to be processed with incorrect upstream API credentials. This leads to cross-tenant billing and misattribution of accountability. The vulnerability has a CVSS 3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, and high impact on confidentiality and integrity.

An authenticated attacker can cause requests from other tenants to be processed using incorrect API credentials, leading to cross-tenant billing and accountability misattribution. This compromises tenant isolation and could result in unauthorized access to or misuse of resources associated with other tenants. There is no indication of availability impact or known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented. Until a fix is available, restrict access to authenticated users and monitor for unusual cross-tenant activity if possible.