Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.
Published: 2026-09-10
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability stems from incomplete security controls and missing execution guards in IBM Langflow OSS, allowing code injection during graph construction. An attacker can supply malicious input that is interpreted as executable code, giving the attacker full control over the host system. The flaw aligns with CWE-94, indicating a vulnerability to arbitrary code execution, with the provided CVSS score of 9.8 underscoring its critical severity.

Affected Systems

IBM Langflow OSS releases from version 1.0.0 through 1.11.5 are affected, including the 1.11.5 build referenced in the advisory. Users deploying these versions bear the risk of remote code execution if they accept externally constructed graphs.

Risk and Exploitability

The CVSS score of 9.8 classifies the issue as critical, and while an EPSS value is not available, the nature of the flaw—remote code execution via graph construction—suggests high likelihood of exploitation, especially when the affected API is exposed to untrusted inputs. The vulnerability is not currently listed in the CISA KEV catalog, but its severity warrants immediate attention.

Generated by OpenCVE AI on September 11, 2026 at 04:25 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.6 https://pypi.org/project/langflow/

OpenCVE Recommended Actions

  • Upgrade IBM Langflow OSS to version 1.11.6 or later available on the Python Package Index.
  • Restrict or disable external graph construction endpoints so that only trusted users can submit graphs, and enforce input validation or sandboxing around the code execution path.
  • Monitor system logs for signs of unexpected code execution or anomalous graph submissions and apply network filtering to limit access to the affected API.

Generated by OpenCVE AI on September 11, 2026 at 04:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.
Title Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-94
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Langflow Oss
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-10T21:36:13.604Z

Reserved: 2026-08-26T16:42:32.830Z

Link: CVE-2026-81204

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-10T22:17:01.580

Modified: 2026-09-10T22:17:01.580

Link: CVE-2026-81204

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-11T07:45:06Z

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')