IBM Langflow Credential Disclosure via Weak Encryption

Executive Summary

CVE-2026-7874 is a critical vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.0 that allows attackers to decrypt all stored credentials, such as API keys, database passwords, and OAuth tokens.

The root cause is the use of a weak and reversible key derivation mechanism for encryption at rest. Specifically, Python's non-cryptographic Mersenne Twister PRNG, seeded with the SECRET_KEY, is used to derive Fernet encryption keys.

If the SECRET_KEY is shorter than 32 characters, the derived encryption key becomes fully deterministic and reproducible by anyone with access to the SECRET_KEY. Even with longer keys, the raw SECRET_KEY is used directly as the Fernet key, making decryption trivial once the secret_key file is obtained.

Additionally, combined with a path traversal vulnerability, attackers could exfiltrate the secret_key file and decrypt all stored credentials offline without brute force.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves the use of a weak and reversible key derivation mechanism in Langflow OSS versions 1.0.0 through 1.10.0, specifically related to the SECRET_KEY used for encrypting stored credentials.

Detection involves verifying the version of Langflow OSS running on your system and checking the length and usage of the SECRET_KEY file.

• Check the installed Langflow OSS version to see if it falls within the vulnerable range (1.0.0 to 1.10.0). For example, use a command like: `langflow --version` or check the package version depending on your installation method.
• Locate the SECRET_KEY file used by Langflow OSS. This file is critical because if it is shorter than 32 characters or accessible, the encryption key can be derived and credentials decrypted.
• Use commands to inspect the SECRET_KEY file length and permissions, for example: `wc -c /path/to/secret_key` to check its length and `ls -l /path/to/secret_key` to check access permissions.
• Monitor for any suspicious access or exfiltration attempts on the SECRET_KEY file, especially considering the related MCP path traversal vulnerability that could allow attackers to retrieve this file.

No specific detection commands or tools are provided by IBM, and no workarounds or mitigations exist other than upgrading to Langflow OSS version 1.10.1.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to the complete disclosure of all stored credentials within Langflow OSS, including sensitive information like API keys, database passwords, and OAuth tokens.

Attackers who gain access to the SECRET_KEY or exploit the related path traversal vulnerability can decrypt these credentials offline without needing to brute force, potentially leading to unauthorized access to connected systems and data.

The vulnerability has a high severity with a CVSS base score of 9.1, indicating a significant risk of confidentiality and integrity compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows attackers to decrypt all stored credentials, including sensitive information such as API keys, database passwords, and OAuth tokens. Such unauthorized disclosure of sensitive data can lead to violations of data protection regulations like GDPR and HIPAA, which mandate the protection of personal and sensitive information.

Because the encryption mechanism is weak and reversible, and attackers can exfiltrate the secret_key file to decrypt credentials offline, the risk of data breach is significantly increased. This undermines the confidentiality and integrity requirements of these standards.

Therefore, organizations using affected versions of Langflow OSS may face compliance issues if this vulnerability is exploited, potentially resulting in regulatory penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

IBM strongly recommends upgrading Langflow OSS to version 1.10.1 to address this vulnerability.

No workarounds or mitigations are provided for this issue.

Useful 0 Not Useful 0