CVE-2026-76059: Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.11.6
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments are exposed where an attacker can submit custom component source code and cause the crafted component to reach the runtime execution path. The available data does not state whether custom component submission is enabled by default.
What access does an attacker need?
The attacker needs the ability to submit custom component source code. They must craft an annotated class-body assignment that resolves through alias tracking to a dangerous callable and have that component executed at runtime.
What is the impact if exploitation succeeds?
Successful exploitation can execute arbitrary operating system commands on the server in-process. Commands run with the privileges of the service running the affected software.