PYSEC-2026-4231: Critical severity IBM Langflow OSS vulnerability

Q: Which deployments are affected?

IBM Langflow OSS versions 1.0.0 through 1.9.3 are affected.

Q: Does exploitation require authentication or user interaction?

No. The supplied vector indicates that exploitation is network-accessible, requires no privileges, and requires no user interaction. The issue includes an authentication bypass.

Q: What could an attacker achieve?

An unauthenticated attacker can execute arbitrary code on the host system, potentially resulting in complete compromise with high impact to confidentiality, integrity, and availability.

Published Jun 22, 2026

Updated

IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise

Affected Software

1 affected component

IBM Langflow OSS>=1.0.0<=1.9.3

Event History

Jun 22, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverity

Frequently Asked Questions

Which deployments are affected?

IBM Langflow OSS versions 1.0.0 through 1.9.3 are affected.

Does exploitation require authentication or user interaction?

No. The supplied vector indicates that exploitation is network-accessible, requires no privileges, and requires no user interaction. The issue includes an authentication bypass.

What could an attacker achieve?

An unauthenticated attacker can execute arbitrary code on the host system, potentially resulting in complete compromise with high impact to confidentiality, integrity, and availability.

PYSEC-2026-4231: Critical severity IBM Langflow OSS vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What could an attacker achieve?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What could an attacker achieve?