CVE-2026-12946
CRITICAL
CVSS 9.9
langflow_oss
Verified Advisory
Remote code execution in IBM Langflow OSS CodeAgent component (CVE-2026-12946)
An authenticated remote attacker can execute arbitrary commands on the server by creating and running a flow that uses the CUGA component's CodeAgent. The vulnerability exists in CodeAgent's Python code execution path, which allows object graph introspection to recover restricted modules and bypass security validators. Successful exploitation can result in full confidentiality, integrity, and availability compromise of the server process.
Affected versions:
- 1.0.0-1.10.0
We recommend updating to: 1.10.1.
CVSS 9.9 · our assessment: act_now
Reference: https://www.ibm.com/support/pages/node/7278928
Details: https://vuln.today/cve/CVE-2026-12946
Verified by vuln.today against published advisories.
Affected versions
- – 1.0.0-1.10.0
Fixed in: 1.10.1
More advisories for langflow_oss
- CVE-2026-8470 – Weak PRNG used for Fernet key generation in IBM Langflow OSS (CVE-2026-8470)
- CVE-2026-9205 – Weak PRNG in cryptographic key derivation in IBM Langflow OSS (CVE-2026-9205)
- CVE-2026-13435 – Python interpreter sandbox bypass in IBM Langflow OSS (CVE-2026-13435)
- CVE-2026-13446 – Hard-coded credentials in IBM Langflow OSS (CVE-2026-13446)
- CVE-2026-13445 – Insecure file path handling in IBM Langflow OSS (CVE-2026-13445)
- CVE-2026-13448 – Unauthenticated remote code execution in IBM Langflow (CVE-2026-13448)
- CVE-2026-14499 – OS command injection in IBM Langflow OSS Python Interpreter (CVE-2026-14499)
- CVE-2026-7667 – Path traversal in the API Request component of IBM Langflow OSS (CVE-2026-7667)