Critical Langflow Flaws Allow Unauthenticated Code Execution
Four flaws in Langflow 1.0.0-1.12.8 enable unauthenticated RCE and auth bypass; upgrade to 1.13.0 fixes them.
75
Vulnerability1 · 1 read
CVE-2026-110193
Authenticated OS command execution in IBM Langflow OSS
- CVSS 3.1
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
IBM Langflow OSS 1.0.0 through 1.12.8 lets the Agentic Assistant generate or submit component code that uses unblocked patterns. A remote attacker with a low-privileged account can trigger this without user interaction and run arbitrary operating system commands on the server. Installations in that version range are affected.
What to do: IBM has not listed a fixed version; apply IBM's update for CVE-2026-110193 when available.
| Product | Affected |
|---|---|
| IBM Langflow OSS | 1.0.0 through 1.12.8 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.