Live › vulnerability › CVE-2026-104317
IBM Langflow OSS versions 1.0.0 through 1.12.3 deserialize untrusted data arriving through the message broker. An attacker who can reach that broker can execute arbitrary code on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted IBM Langflow OSS in the affected range where the message broker can be reached by an attacker, such as a broker exposed beyond the trusted network. The sources do not say which broker configuration is default, so unknown whether a standard deployment is exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| langflow | pypi | >= 1.0.0, <= 1.12.3 | 1.12.4 |
langflow --version or pip show langflow, and treat 1.0.0 through 1.12.3 as affected.1.12.4 or later (IBM)1.12.8 and recommends 1.13.0 or later, so move to 1.13.0+pip install langflow --upgradeEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
This page as .md · .json · in your agent: get_signal("CVE-2026-104317")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.