CVE-2026-18894: IBM Langflow OSS vulnerability
Langflow OSS could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments with public workflows that contain stored Python component code are implicated. The affected execution path is the public workflow path rather than the intended server-trusted-component-only boundary.
Does exploitation require an attacker to add new Python code to a workflow?
The described attack triggers pre-existing stored Python component code in a public workflow. The provided information does not state that the attacker must be able to create or modify that code.
What execution context would the triggered code receive?
The code executes in the flow owner's runtime context within the server process. This could expose privileges available to that owner and process context.