CVE-2026-103092: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.
Other sources
Langflow OSS could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.4 - Operational
Back up the existing Langflow OSS installation before upgrading.
- Operational
Test your flows after installing Langflow OSS 1.12.4.
Event History
Frequently Asked Questions
Which deployments should be treated as affected?
IBM Langflow OSS versions 1.0.0 through 1.12.3 are identified as affected. The provided data does not state whether versions outside this range are affected.
What level of attacker access is required?
Exploitation requires remote authenticated access with low privileges. No user interaction is required.