IBM Langflow OSS versions 1.0.0 through 1.10.1 have a vulnerability that allows an attacker with limited privileges to access another user's private vector documents by creating a flow with matching Chroma persist_directory and collection_name values. This unauthorized access exposes the victim's exact content in the attacker's workflow output. Additionally, the attacker can insert documents into the victim's collection, potentially polluting the victim's data. The vulnerability does not require user interaction but does require some level of privilege to create flows.