IBM Langflow OSS 1.0.0

Published September 10, 2026 CVE-2026-76059

IBM Langflow OSS can let an attacker run operating-system commands on its server. The attacker must be able to submit custom component source code first.

Severity
HighCVSS 3.1 · 8.8
Fix
Fixed in 1.11.6
Affected versions
1.0.0 through 1.11.5
Weakness
CWE-693
Exploit likelihood
0.49% in 30 daysEPSS, higher than 40% of known flaws
Affects
Langflow OSS
Exploited
Not confirmedNo confirmation recorded
CISA SSVC
No known exploitationAutomatable: no · Technical impact: total
EU ID
EUVD-2026-75801ENISA vulnerability database

How it works

  • An attacker with permission to submit custom component source code can disguise a dangerous callable inside a class assignment with extra type information.
  • Langflow's scanner follows the alias but fails to check the resolved value against its blocked list.
  • If the component reaches runtime, the server runs operating-system commands with the service's privileges.

What to do

Check the Langflow OSS version in your deployment and compare it with IBM's security bulletin. Versions 1.0.0 through 1.11.5 are affected.

Upgrade Langflow OSS to version 1.11.6, as IBM recommends in its security bulletin.

Technical details

CVE-2026-76059 is a protection-control failure with a CVSS score of 8.8. A crafted annotated class-body assignment bypasses the static scanner's dangerous-callable blocklist, enabling operating-system command execution when the component runs.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required Low Attacker needs a basic user account
  • User interaction None No victim action needed
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact High Protected data can be changed with serious impact
  • Availability impact High The service can stop or suffer serious disruption
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Open in FIRST.org calculator

References

View Original Source