CVE-2026-12944

critical

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting co…

Vendor / product: Langflow — langflow

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.

CVSS

9.6

9.6 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Severity source: NVD CVSS v3.1 (psirt@us.ibm.com)

Timeline (UTC)

Published: 2026-09-14 22:16

Modified: 2026-11-03 18:27

NVD status: Analyzed

Last synced 1 day ago

Verified against the source API 2026-11-03 18:50 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

langflow / langflow ≥1.0.0 <1.10.1

Weakness classification (CWE)

CWE-918

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://www.ibm.com/support/pages/node/7278919

Patch / mitigation: https://www.ibm.com/support/pages/node/7278919

References

https://www.ibm.com/support/pages/node/7278919 psirt@us.ibm.com

Data sources

NVD CVE API 2.0 — fetched 2026-11-03 18:50 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-12944

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs