IBM Langflow OSS: Remote code execution via improper code generation control
Summary
IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection flaw (CWE-94) that allows a remote attacker with a valid user account to execute arbitrary code. Successful exploitation runs code with the privileges of the Langflow service, which can expose secrets, API keys and data the service can access. The CVSS base score is 8.8 (high), and the attack requires only low-privilege authentication.
Affected
- IBM Langflow OSS 1.0.0 through 1.12.2 (per the official CVE record)
Fixed in
- Upgrade to IBM Langflow OSS 1.12.3 or later (per IBM and the official CVE record)
Workaround
- No workaround is documented by IBM. Upgrading is the only documented fix.
Exploitation
- CISA SSVC assessment: exploitation none, not automatable.
- No public proof of concept or in-the-wild exploitation is known at the time of writing.
Our recommendation
- Upgrade all Langflow OSS instances to version 1.12.3 or later.
- Review and restrict which users hold accounts and can create or edit flows.
- Check whether Langflow instances are reachable from the internet and restrict access until patched.
- Monitor the service for unexpected process or command execution.
- Verify the exact CVE ID in the IBM security bulletin, as the bulletin groups several Langflow vulnerabilities.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- IBM Security Bulletin: Langflow OSS www.ibm.com
- OSV: CVE-2026-93449 osv.dev
- VulDB: CVE-2026-93449 vuldb.com
- GBHackers: IBM patches multiple Langflow OSS flaws gbhackers.com
- OpenCVE: CVE-2026-93449 app.opencve.io
- Strix: CVE-2026-93449 www.strix.ai
- Safeguard.sh: IBM Langflow code injection safeguard.sh
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 21:31.
Original description (NVD)
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.