Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-78569
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- September 10, 2026
- Source last modified
- September 16, 2026
Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.11.5. Langflow includes a built-in security scanner meant to block harmful code, but its list of blocked items is incomplete. Because of this, someone who already has a login to your Langflow could run code of their choosing on the system running it. This flaw is rated High. If your organization does not use Langflow, this problem does not affect you.
What to do
- Find out who runs Langflow for your organization. This could be the person who installed it, or an IT provider or vendor who manages it. That person should handle the steps below.
- If that person is on your staff, have them check which version is in use. Versions 1.0.0 through 1.11.5 are affected.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it as soon as one is available.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of September 16, 2026 and reviewed before publishing.