CVE-2026-19295 PUBLISHED

Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

Assigner: ibm
Reserved: 07.08.2026 Published: 28.08.2026 Updated: 28.08.2026

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.9

Attack Vector	Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	IBM
Product	Langflow OSS
Versions	affected from 1.0.0 to 1.11.1 (incl.)

Solutions

IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.11.2 https://pypi.org/project/langflow/

References

https://www.ibm.com/support/pages/node/7284733

Problem Types

CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') CWE