CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities
CriticalCVSS 9.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm langflow oss | >= 1.0.0, <= 1.12.4 | No fix listed |
| langflow | >= 1.0.0, < 1.12.5 | 1.12.5 |
References
- www.ibm.com patch vendor-advisory