IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a vulnerability in the MCP Tools component where improper cache key isolation allows an authenticated attacker to access another user's MCP server context. This issue could lead to limited confidentiality and integrity impacts but does not affect availability.