Code injection in IBM Langflow OSS ToolGuard component (CVE-2026-9135)

CVE-2026-9135 is a code injection vulnerability (CWE-94) in IBM Langflow OSS affecting the Policies component's ToolGuard integration. The validation mechanism enforcing the allow_custom_components=false security control checks only the main component source code field and fails to validate dynamic CodeInput fields, allowing authenticated users with flow creation privileges to achieve arbitrary Python code execution on the backend. The vulnerability can be escalated to cross-tenant code injection via the MCP update_flow_component_field tool and, under specific misconfigurations, can be exploited with reduced authentication requirements. CVSS Base Score: 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Affected versions: - 1.0.0-1.10.0 - up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) We recommend updating to: 1.10.1. CVSS 9.9 · our assessment: act_now Vendor advisory: https://www.ibm.com/support/pages/node/7278920 Details: https://vuln.today/cve/CVE-2026-9135