CVE-2026-10700 describes multiple broken access control issues in IBM Langflow OSS versions 1.0.0 through 1.8.4. The vulnerability affects two API endpoints: the images endpoint lacks any authentication or authorization, allowing unauthenticated attackers to retrieve image files by specifying valid flow IDs and file names. The download endpoint requires authentication but fails to validate that the authenticated user owns the requested file, resulting in an authorization bypass (IDOR). These flaws enable unauthorized access to user files, potentially exposing sensitive data stored in private flows and compromising tenant isolation in multi-user deployments.

Successful exploitation allows unauthorized disclosure of sensitive files belonging to other users. Unauthenticated attackers can access image files via the images endpoint, and authenticated users can bypass authorization checks to download files they do not own. This breaks tenant isolation and may expose private data, but does not affect data integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch has been published as of now. Until a fix is available, restrict access to the vulnerable API endpoints through network controls or authentication proxies where possible. Monitor for unusual access patterns to these endpoints and apply strict access controls in deployment environments.