Live › vulnerability › CVE-2026-110196
IBM Langflow OSS versions 1.0.0 through 1.12.4 let a logged-in user with a low-privilege account bypass the administrator-only restriction on a built-in code-execution component. An attacker who can configure such a component with crafted inputs can execute arbitrary code on the server running Langflow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running IBM Langflow OSS between 1.0.0 and 1.12.4 where more than one user has an account. The flaw sits in the built-in code-execution component, so instances restricted to trusted users and not exposing that component are lower risk. unknown whether a specific deployment configuration is required beyond default.
No product ranges from the sources yet.
langflow --version or the version shown in the running instance.1.12.4; the exact fixed release is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs.
This page as .md · .json · in your agent: get_signal("CVE-2026-110196")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.