Live › vulnerability › CVE-2026-107329
IBM Langflow OSS versions 1.0.0 through 1.12.4 let a logged-in remote user run arbitrary code on the server because the code generation path does not properly control what it executes. An attacker who holds any valid account gets code execution on the host running Langflow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted IBM Langflow OSS between 1.0.0 and 1.12.4 are exposed, especially where many people or external users have accounts. The flaw needs an authenticated session, so instances restricted to trusted accounts are at lower risk but still exposed to any compromised login. Deployments on managed hosting controlled by someone else should be checked with that provider.
No product ranges from the sources yet.
langflow --version or pip show langflow.1.0.0 to 1.12.4 is running, including Docker images.1.12.4Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
This page as .md · .json · in your agent: get_signal("CVE-2026-107329")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.