IBM Langflow OSS CVE-2026-107327

Exploitation requires the attacker to already possess valid authenticated access to the Langflow OSS instance (CVSS PR:L), after which a missing authorization check (CWE-862) permits actions leading to arbitrary code execution; no user interaction is needed (UI:N) and the vector is network-reachable (AV:N). The limiting factor is the authentication requirement - an attacker must first obtain or be granted a (low-privilege) account, so instances that tightly restrict account provisioning or are not network-exposed face reduced risk. The exact product feature, endpoint, or configuration that lacks the authorization check is not described in the available sources. Affected deployments are IBM Langflow OSS versions 1.0.0 through 1.12.4; upgrading to the IBM-provided patched release is indicated as the remediation.

This is a credible, high-priority vulnerability but not an emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8 High) indicates network-reachable exploitation with low attack complexity, no user interaction, and full compromise of confidentiality, integrity and availability - but it requires some level of authentication (PR:L). CWE-862 (Missing Authorization) is consistent with the description: an already-authenticated low-privilege user can reach functionality they should not, leading to arbitrary code execution. The SSVC decision framework tempers the raw severity: Exploitation is rated 'none' (no observed or public exploitation), Automatable is 'no' (meaning it cannot be trivially mass-exploited by automated tooling, consistent with the PR:L authentication requirement), while Technical Impact is 'total' (consistent with C:H/I:H/A:H). There is no CISA KEV listing and no EPSS score was supplied, so widespread-exploitation probability cannot be quantified from the input. No proof-of-concept or exploit reference appears in the provided references (only an IBM patch page and the NVD advisory). The vuln.today priority label is 'this_week', which aligns with act-promptly-but-not-emergency handling. Net: a real priority to patch given total technical impact and low complexity, but the authentication prerequisite and absence of known exploitation argue against drop-everything urgency.

An attacker who holds valid low-privilege credentials for an IBM Langflow OSS instance (versions 1.0.0 through 1.12.4) reaches an endpoint or function that fails to enforce proper authorization checks, and uses it to execute arbitrary code on the server. No user interaction or additional privilege escalation step is required. No public exploit code or PoC reference is present in the supplied sources.