Description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Published: 2026-10-29
Score: 8.1 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows a remote attacker who can reach the message broker to execute arbitrary code on the host. The flaw originates from unsafe deserialization of untrusted data, a classic example of CWE‑502 unauthenticated deserialization, which can grant an attacker full control over the affected system.

Affected Systems

The affected product is IBM Langflow OSS. All releases from version 1.0.0 up to and including 1.12.3 are impacted.

Risk and Exploitability

The CVSS score of 8.1 indicates a high severity. No EPSS score is provided, and the vulnerability is not currently listed in CISA KEV, but that does not preclude exploitation. The likely attack vector is a remote attacker with the ability to send crafted messages to the broker, triggering the unsafe deserialization. Successful exploitation would result in arbitrary code execution and a complete compromise of the system.

Generated by OpenCVE AI on October 29, 2026 at 16:37 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.12.4. https://pypi.org/project/langflow/1.12.4/ For Langflow OSS versions 1.0.0 - 1.12.3, follow the Prepare to upgrade instructions and release-specific configuration changes https://docs.langflow.org/release-notes , including backing up your existing installation, then follow the Langflow OSS installation instructions https://docs.langflow.org/get-started-installation to install version 1.12.4 and test your flows.

OpenCVE Recommended Actions

  • Upgrade IBM Langflow OSS to version 1.12.4 or later, following the official release notes and installation instructions.
  • Prior to upgrading, back up the existing installation and review the Prepare to upgrade instructions for any required configuration changes.
  • Restrict access to the message broker so that only trusted internal services can communicate with Langflow; consider network segmentation or firewall rules to isolate the broker.

Generated by OpenCVE AI on October 29, 2026 at 16:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Title Langflow OSS is affected by multiple vulnerabilities
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-502
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.12.3:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Langflow Oss
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-29T15:17:09.357Z

Reserved: 2026-10-01T19:52:54.459Z

Link: CVE-2026-104317

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-29T16:17:43.907

Modified: 2026-10-29T16:17:44.000

Link: CVE-2026-104317

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-29T17:15:07Z

Weaknesses
  • CWE-502

    Deserialization of Untrusted Data