CVE Intelligence
Analysis AI-assisted

CVE-2026-10134: IBM Langflow OSS Code Injection

IBM Langflow OSS versions 1.0.0 through 1.9.3 are affected by CVE-2026-10134, a code injection issue (CWE-94) scored 10.0 under CVSS 3.1 by the CNA. The record describes access to secrets and stored data, movement across tenants, and persistence through modified public flows. No fixed version is listed in the record, so teams should check the vendor advisory and restrict exposure until a fix is confirmed.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

IBM published a vendor advisory for Langflow OSS covering CVE-2026-10134, a code injection issue (CWE-94) that the CNA scored 10.0 under CVSS 3.1. The record describes effects that reach well beyond a single flow, including access to secrets and stored data.

Impact

  • Exposure of secrets available to the Langflow process.
  • Read and modification of flows, conversations, messages, file uploads and saved components in the Langflow database.
  • Reach to internal services and cloud metadata endpoints, as described in the record.
  • Possible movement across tenants that share the same Langflow instance.
  • Persistence through modification of a public flow, which can affect later builds run by other users.

The CVSS 3.1 vector indicates a network attack that needs no privileges and no user interaction, with a scope change and high impact to confidentiality, integrity and availability.

Affected products and versions

The record lists Langflow OSS from 1.0.0 through 1.9.3 inclusive. Compare deployed versions against this range and against the vendor advisory, which is the authoritative source for product scope.

Exploitation status

This CVE is not listed in the CISA KEV catalog according to the record. No confirmed exploitation appears in the sources consulted for this analysis, and that statement may change as new information is published.

Remediation and mitigation

  • Review the IBM advisory and identify the fixed release, since the record does not list one.
  • Once the vendor confirms a fixed version, upgrade Langflow OSS to a release outside the affected range.
  • Until a fix is applied, limit network exposure of Langflow instances and restrict who can reach them.
  • Audit public flows and their tool code for unexpected changes.
  • If exposure cannot be ruled out, rotate secrets that were available to the Langflow process.

Detection guidance

  • Review logs for unexpected changes to flows, components and public flow configurations.
  • Monitor outbound connections from Langflow hosts to internal services and cloud metadata addresses.
  • Look for unexpected tool code or unusual behavior during flow builds.

Limitations of the available information

The record contains no fixed version and no patch details beyond the vendor reference. It provides no technical exploitation details beyond the description, and whether public proof-of-concept material exists is unknown from these sources. EPSS values are time-dependent and should be read with their date.

Frequently asked questions

Which Langflow OSS versions are affected by CVE-2026-10134?

According to the record, Langflow OSS from 1.0.0 through 1.9.3 inclusive is affected. Confirm against the IBM vendor advisory.

Is this vulnerability known to be exploited in the wild?

The record shows it is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted for this analysis.

Is a fixed version available?

The record does not list a fixed version. Check the IBM advisory for remediation details and apply the fix once the vendor confirms it.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.