Live › vulnerability › CVE-2026-110309
IBM Langflow OSS versions 1.0.0 through 1.12.4 let a logged-in user run arbitrary operating system commands on the server. The flaw comes from improper control of code generation, so a crafted request is turned into code that the server executes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted IBM Langflow OSS in the 1.0.0 to 1.12.4 range are exposed, especially where many people hold accounts or the instance is reachable from the internet. Managed or hosted Langflow deployments run by someone else are a matter for that provider. The sources do not say whether default configuration is affected.
No product ranges from the sources yet.
pip show langflow, or the image tag if run in Docker) and see whether it falls in 1.0.0 through 1.12.4.1.12.4; the sources do not name the exact fixed release.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.
This page as .md · .json · in your agent: get_signal("CVE-2026-110309")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.