IBM Langflow OSS CVE-2026-110309

Exploitation requires a network-reachable IBM Langflow OSS instance running an affected version (1.0.0 through 1.12.4) and a valid low-privilege authenticated account (CVSS PR:L), after which no user interaction is needed (UI:N). The flaw is improper control of code generation (CWE-94), so the attacker must be able to reach the code-generation / flow-execution functionality that processes attacker-controlled input; the available description does not specify the exact feature, parameter, or configuration that triggers it, so the precise trigger is not described in the available sources. The principal limiting factor is the authentication requirement - an attacker needs valid credentials or an account - which meaningfully reduces exposure for instances that are not multi-tenant or publicly registrable, but provides little protection for internet-exposed deployments with open or weak account provisioning.

This is a serious, actionable vulnerability but not a drop-everything emergency based on the available signals. The CVSS 3.1 base score is 8.8 (High) with vector AV:N/AC:L/PR:L/UI:N, meaning network-reachable, low-complexity exploitation requiring only low-privilege authentication and no user interaction, with full compromise of confidentiality, integrity and availability (C:H/I:H/A:H) - consistent with CWE-94 arbitrary command execution. The vuln.today decision label is 'this_week', a prioritize-but-not-emergency signal, and a vendor patch is available. No EPSS exploitation-probability score was provided, the CVE is not listed in CISA KEV in the supplied data, and no proof-of-concept or exploit reference is present - so exploitation status is 'no public exploit identified at time of analysis'. The signals are internally consistent rather than conflicting: a high technical-impact flaw with a low barrier (only an authenticated account needed), no confirmed in-the-wild activity, and a fix already shipped. The main residual uncertainty is the real-world value of PR:L - any user who can create or run flows effectively reaches the vulnerable code path - so in multi-tenant or internet-exposed Langflow deployments the authentication requirement is a weak barrier. Treat as a genuine priority for patching within the vendor/decision-label window, not as a low-real-risk high-CVSS artifact.

An attacker who holds (or obtains) a low-privilege authenticated account on an internet-reachable IBM Langflow OSS instance (1.0.0-1.12.4) sends crafted input that abuses the improper control of code generation to inject and execute arbitrary operating-system commands on the host. Because no user interaction and no elevated privileges are required (AV:N/AC:L/PR:L/UI:N), a single logged-in session is sufficient to achieve remote code execution. No public exploit code was identified in the provided intelligence, so this scenario is inferred from the CVSS vector and CWE-94 classification rather than a demonstrated PoC.