CVE-2026-81211: Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.
Other sources
Langflow OSS could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.11.6
Event History
Frequently Asked Questions
Does exploitation require prior access?
Yes. The issue is described as requiring a remote authenticated attacker.
Which deployments should be prioritized for review?
Prioritize IBM Langflow OSS deployments where authenticated users can interact with stored flows that use custom components, because the authorization weakness affects custom components in stored flows.
What is the potential impact if the issue is exploited?
An attacker could execute arbitrary Python code.