Information Disclosure in IBM Langflow OSS

Executive Summary

IBM Langflow OSS versions 1.0.0 through 1.10.1 allow an attacker to access another user's private vector documents by creating a flow with matching Chroma persist_directory and collection_name values. The attacker receives the victim's exact content in their workflow output without proper authorization. Additionally, the attacker can insert their own documents into the victim's shared collection.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check for unauthorized access to Chroma vector databases by monitoring for flows with matching persist_directory and collection_name values across different users. Inspect workflow outputs for unexpected content from other users. Review logs for suspicious document insertions into shared namespaces.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive documents, data leakage, and potential manipulation of shared collections. Attackers could steal proprietary or confidential information, inject malicious content, or disrupt workflows relying on shared vector databases.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may violate data protection regulations like GDPR and HIPAA by enabling unauthorized access to personal or sensitive data. Organizations could face compliance violations, legal penalties, and reputational damage due to data breaches resulting from this issue.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update IBM Langflow OSS to a version beyond 1.10.1 to address the vulnerability. Ensure all users avoid using matching Chroma persist_directory and collection_name values across different workflows to prevent unauthorized access.

Useful 0 Not Useful 0