CVE-2026-81211

Received Received - Intake

Remote Code Execution in IBM Langflow OSS

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-81211

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	langflow_oss	From 1.0.0 (inc) to 1.11.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

IBM Langflow OSS versions 1.0.0 through 1.11.5 have an authorization flaw in custom components within stored flows. A remote authenticated attacker could exploit this to execute arbitrary Python code on the affected system.

Detection Guidance

Detecting this vulnerability requires checking for IBM Langflow OSS versions 1.0.0 through 1.11.5 with custom components in stored flows. Inspect the version of Langflow installed on your system using commands like 'pip show langflow' or 'langflow --version'. Review stored flows for custom components that may allow arbitrary Python code execution.

Impact Analysis

This vulnerability allows attackers to run malicious Python code remotely. This could lead to unauthorized data access, system compromise, or further network infiltration if exploited.

Compliance Impact

This vulnerability allows remote authenticated attackers to execute arbitrary Python code due to improper authorization in custom components. This could lead to unauthorized data access, modification, or exfiltration, which may violate GDPR (data protection) and HIPAA (health data privacy) requirements for access controls and integrity.

Mitigation Strategies

Immediately upgrade IBM Langflow OSS to a version beyond 1.11.5. If upgrading is not possible, restrict access to authenticated users with minimal privileges and disable custom component functionality in stored flows. Monitor for suspicious activity in flow execution logs.

Hi! I’m here to help you understand CVE-2026-81211. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70