Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Langflow
More for Langflow RSS feed for Langflow
- Severity
- High, CVSS 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Record
- CVE-2026-97674
- Affects
- Langflow
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- October 7, 2026
- Source last modified
- October 8, 2026
Description
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.
Description quoted from the NVD record.
Who is affected
Langflow (also called IBM Langflow OSS) is a tool for building apps that use AI language models. This flaw affects versions 1.0.0 through 1.12.2. Someone who already has a login to your Langflow could use it over the network to run any commands they choose on the computer that runs Langflow, because a part of the product does not safely handle certain special characters. This flaw is rated High. If your organization does not use Langflow, this flaw does not affect you.
What to do
- Find out whether your organization uses Langflow, and who installed it or runs it: a staff member, a volunteer, or an IT provider or vendor.
- No fixed version is named for this flaw yet, so the person who runs Langflow should check the vendor advisory linked on this page for a fixed release.
- When a fixed release is available, that person should update every copy of Langflow running versions 1.0.0 through 1.12.2.
- If an IT provider or vendor runs Langflow for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 8, 2026 and reviewed before publishing.