CVE-2026-110196: Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs.
Other sources
Langflow OSS could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Langflow OSSto a version that resolves this vulnerability.Fixed in 1.12.5 - Operational
Back up the existing Langflow OSS installation before upgrading, then test your flows after installing version 1.12.5.
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must be remotely authenticated to exploit the vulnerability.
What is the impact of successful exploitation?
A successful attacker could execute arbitrary commands on the affected IBM Langflow OSS system.