Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-97655
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- October 7, 2026
- Source last modified
- October 8, 2026
Description
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.12.2. The problem is in the built-in safety check that scans code for dangerous instructions. Its list of blocked items is incomplete, so some harmful code can slip past it. An attacker working remotely could use this to run any code they choose on the computer or server where Langflow runs. This flaw is rated High.
What to do
- Find out who installed or runs Langflow for your organization: a staff member, a volunteer, or an IT provider or vendor that manages it for you.
- No fixed version is named for this flaw yet, so the person who runs Langflow should check the vendor advisory linked on this page for a fixed release.
- If an IT provider or vendor runs Langflow for you, send them this advisory and ask when the update will be done.
- When a fixed release is available, have the person responsible install it on every copy of Langflow your organization uses that is on version 1.0.0 through 1.12.2.
Analysis written from the source record as of October 8, 2026 and reviewed before publishing.