CVE Intelligence
Analysis AI-assisted

CVE-2026-10561: IBM Langflow OSS: code injection with authentication bypass

IBM disclosed CVE-2026-10561 in Langflow OSS versions 1.0.0 through 1.9.3, describing improper isolation of Python execution combined with an authentication bypass. According to the record, an unauthenticated attacker could execute arbitrary code on the host, and the CNA scored it 10 under CVSS 3.1. The sources consulted show no fixed version listed in the record and no confirmed exploitation.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

IBM published a vendor advisory for CVE-2026-10561, which affects Langflow OSS from 1.0.0 through 1.9.3. The record describes improper isolation of Python execution (CWE-94, Code Injection) combined with an authentication bypass.

Impact

  • The record states that an unauthenticated attacker could execute arbitrary code on the host system.
  • The CNA describes the result as complete compromise of the host.
  • The CVSS 3.1 vector reported by the CNA indicates a network attack vector, low complexity, no privileges or user interaction required, scope changed, and high impact to confidentiality, integrity and availability.

Affected products and versions

  • Product: Langflow Langflow (Langflow OSS), versions from 1.0.0 through 1.9.3 inclusive, as stated in the record.
  • The record lists no fixed versions. This does not mean that no fix exists; consult the IBM advisory.

Exploitation status

  • The CISA KEV catalog entry in the record shows this CVE is not listed.
  • No confirmed exploitation appears in the sources consulted for this analysis.
  • The record contains no EPSS score.

Remediation and mitigation

  • Check whether your Langflow OSS deployments fall within 1.0.0 through 1.9.3.
  • Review the IBM security bulletin for remediation guidance and any fixed release.
  • Until a fix is applied, reduce exposure: restrict network access to Langflow instances, keep them off untrusted networks, and place them behind authenticated gateways.
  • If exposure is suspected, rotate credentials and secrets accessible from hosts running Langflow.

Detection guidance

  • Inventory Langflow instances and their deployed versions.
  • Monitor hosts running Langflow for unexpected child processes, unusual outbound connections, and new or modified files.
  • Review access logs for requests to Langflow endpoints from unknown sources.

Limitations of the available information

  • The record gives no fixed version, no detailed affected component, and no technical details beyond the general description.
  • EPSS and SSVC data are absent from the record.
  • This analysis relies on the NVD record, the CVE Program record and the IBM advisory link included in the record.

Frequently asked questions

Which Langflow OSS versions are affected by CVE-2026-10561?

The record states that IBM Langflow OSS versions from 1.0.0 through 1.9.3 are affected. Check your deployed version against that range and review the IBM advisory.

Does the record show a fixed version?

No. The record lists no fixed versions. This does not mean no fix exists, so consult the IBM security bulletin linked in the references.

Is this vulnerability known to be exploited?

The CISA KEV entry in the record shows it is not listed, and no confirmed exploitation appears in the sources consulted for this analysis.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.