Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

IBM Langflow OSS lets logged-in user run any command

CVE-2026-19295 · published 2 months ago
Summary

Versions 1.0.0 through 1.11.1 of IBM Langflow OSS let someone who is already logged in save a specially crafted flow and cause the server to execute any operating system command. This means an attacker can move from a normal user role to full control of the server process. Apply the latest update or restrict flow creation to trusted users to stop this risk.

What to do
  • Update langflow langflow to version 1.11.2 or later.
Affected software
VendorProductAffected versions
ibm langflow oss <= 1.11.1
langflow langflow >= 1.0.0, < 1.11.2
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Original advisory text
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and trig...
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Timeline
Published28 Aug 2026
Updated29 Oct 2026
First seen28 Aug 2026
Sources
CVE-2026-19295 · NVD
CVE-2026-19295 · MITRE
Track software like this
Free during beta