Description
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.
Published: 2026-08-05
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from incomplete validation of user‑supplied code during component generation, validation, and custom component handling, allowing an attacker to inject and execute arbitrary code on the system. The flaw is a classic code injection weakness (CWE‑94) that enables full compromise of confidentiality, integrity, and availability if exploited.

Affected Systems

IBM Langflow OSS is affected in all releases from version 1.0.0 through 1.10.3. The affected CPEs include cpe:2.3:a:ibm:langflow_oss:1.0.0 and cpe:2.3:a:ibm:langflow_oss:1.10.3. IBM recommends updating to version 1.11.0 or newer.

Risk and Exploitability

The CVSS score of 8.8 classifies the weakness as high severity, and the security analyst should treat it with priority. Although the EPSS score is not available, the lack of a KEV listing does not reduce the risk of an attacker targeting this widespread platform. The likely attack path is remote: an attacker can send malicious code through the exposed component creation API or web interface, bypassing input checks and causing arbitrary code execution on the host.

Generated by OpenCVE AI on August 5, 2026 at 19:21 UTC.

Remediation

Vendor Solution

IBM recommends upgrading to Langflow OSS 1.11.0 or newer https://github.com/langflow-ai/langflow/releases

OpenCVE Recommended Actions

  • Upgrade IBM Langflow OSS to version 1.11.0 or newer.
  • Restrict access to component generation, validation, and custom component endpoints to trusted administrators using authentication and role‑based controls.
  • Enforce strict input validation and sanitization on all user‑supplied code before it is processed, ensuring only approved patterns or signatures are allowed.

Generated by OpenCVE AI on August 5, 2026 at 19:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 05 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Description IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.
Title Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
First Time appeared Ibm
Ibm langflow Oss
Weaknesses CWE-94
CPEs cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:langflow_oss:1.10.3:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm langflow Oss
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Langflow Oss
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-08-05T19:02:06.604Z

Reserved: 2026-05-13T13:34:48.217Z

Link: CVE-2026-8478

cve-icon Vulnrichment

Updated: 2026-08-05T19:02:03.154Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T19:30:05Z

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')