CVE-2026-19295

CriticalCVSS 9.9

Published: 28/08/2026(UTC)Translated: 29/08/2026(UTC)NVD NIST

Summary

IBM Langflow OSS versions 1.0.0 through 1.11.1 allow an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allows privilege escalation from 'authenticated flow user' to arbitrary OS-level command execution, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy.

Risk Assessment

The risk includes full compromise of the server process, potentially leading to loss of confidentiality, integrity, and availability of the system and data.

Recommendation

It is recommended to immediately update IBM Langflow OSS to a version that includes a fix for this vulnerability.

Original NVD description (English source)

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.