IBM Langflow OSS CVE-2026-101288

Exploitation requires an authenticated low-privilege account on the IBM Langflow OSS instance (CVSS PR:L), reachable over the network (AV:N), with no user interaction needed. The flaw is improper neutralization of special elements used in code (CWE-94), but the exact product feature, input field, or configuration that reaches the vulnerable code path is not described in the available sources. The primary limiting factors are the authentication requirement and network exposure of the instance: internet-facing or multi-tenant deployments where low-privilege accounts exist are most at risk, whereas isolated single-user or network-segmented deployments reduce reachable attack surface. Affected versions are 1.0.0 through 1.12.3; updating to the vendor-patched release is the remediation indicated by IBM.

This is a genuine priority-tier issue, though short of an emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) describes network-reachable, low-complexity code execution requiring only low-privilege authentication and no user interaction, with total loss of confidentiality, integrity, and availability on the affected host - a strong severity profile for a CWE-94 code-injection flaw yielding RCE. The vuln.today decision label is 'this_week,' which signals near-term remediation rather than immediate emergency response. Crucially, several key real-world signals are MISSING: no EPSS exploitation-probability score is provided, the CVE is NOT listed in CISA KEV (no confirmed active exploitation), and no public PoC or exploit reference is supplied - only a vendor patch reference. The authentication requirement (PR:L) is a meaningful limiter: an attacker must already hold a valid low-privilege account on the Langflow instance, so exposure concentrates on internet-facing or multi-tenant deployments and on scenarios where account credentials are weak, shared, or obtainable. In short, high intrinsic severity confirmed by the vector, but without EPSS/KEV/PoC evidence the likelihood of imminent widespread exploitation cannot be asserted - treat as a high-severity patch-this-week item, not a confirmed in-the-wild threat.

An attacker who holds a valid low-privilege account on an exposed IBM Langflow OSS instance submits input containing improperly neutralized special code elements, causing the server to execute attacker-controlled code with the application's privileges. No user interaction is required and attack complexity is low. No public exploit code has been identified at the time of analysis.