CVE-2026-10140 affects IBM Langflow OSS versions 1.0.0 through 1.10.0 in voice mode due to improper handling of shared state. This allows reuse of API clients across tenant boundaries, which an authenticated attacker can exploit by manipulating cache state. Consequently, requests originating from other users may be processed using incorrect upstream API credentials, leading to cross-tenant billing and misattribution of accountability. The vulnerability is an authorization bypass categorized under CWE-639. No official patch or remediation level has been provided in the available data.

The vulnerability can lead to cross-tenant billing errors and accountability misattribution, meaning that one tenant's API requests could be charged or logged under another tenant's credentials. This compromises tenant isolation and could cause financial and operational issues for affected users. There is no indication of availability impact or data confidentiality loss beyond the described billing and accountability issues.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor IBM's advisories for updates. Until a fix is available, restricting access to authenticated users and minimizing shared-state usage where possible may reduce risk, but no definitive mitigation is documented.