CVE-2026-104317: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Other sources
Langflow OSS could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.4 - Operational
Back up the existing Langflow OSS installation before upgrading.
- Operational
Test your flows after installing Langflow OSS 1.12.4.
Event History
Frequently Asked Questions
What access would an attacker need to attempt exploitation?
The vector is network-based, and the CVSS metrics indicate no privileges or user interaction are required. Exploitation has high attack complexity.
What could a successful exploit allow?
The vulnerability is rated critical with a 9.8 CVSS score. It is assessed as having high impact on confidentiality, integrity, and availability.
Is the impact expected to extend beyond the affected security authority?
No. The CVSS scope is unchanged, indicating the assessed impact remains within the affected security authority.