IBM Langflow OSS 1.0.0

Published September 10, 2026 CVE-2026-81211

An attacker with a Langflow account could run arbitrary Python code through stored flows. That could expose, change, or disrupt the Langflow installation.

Severity
HighCVSS 3.1 · 8.8
Fix
Fixed in 1.11.6
Affected versions
1.0.0 through 1.11.5
Weakness
CWE-862Missing Authorization
Exploit likelihood
0.34% in 30 daysEPSS, higher than 27% of known flaws
Affects
Langflow OSS
Exploited
Not confirmedNo confirmation recorded
CISA SSVC
No known exploitationAutomatable: no · Technical impact: total
EU ID
EUVD-2026-75781ENISA vulnerability database

How it works

  • A remote user first needs a valid Langflow account.
  • They can place custom components in a stored flow.
  • Langflow does not properly check whether that user is allowed to use those components, so the flow can execute their Python code.

What to do

Check the Langflow installation's version and compare it with IBM's advisory. Versions 1.0.0 through 1.11.5 are in scope.

Upgrade IBM Langflow OSS to version 1.11.6, as IBM recommends in its security advisory.

Technical details

Affected software: Langflow OSSby IBM

CVE-2026-81211 is an authorization failure involving custom components in stored Langflow flows. A remote authenticated attacker can execute arbitrary Python code. IBM rates it High with a CVSS score of 8.8.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required Low Attacker needs a basic user account
  • User interaction None No victim action needed
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact High Protected data can be changed with serious impact
  • Availability impact High The service can stop or suffer serious disruption
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Open in FIRST.org calculator

References

View Original Source