What is the CVSS score of CVE-2026-97674?

CVE-2026-97674 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of IBM Langflow OSS are affected by CVE-2026-97674?

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an authenticated remote code execution flaw that allows any user with valid credentials - including low-privileged accounts - to run arbitrary…. A patch is available.

How to fix or mitigate CVE-2026-97674?

Within 24 hours, inventory all Langflow OSS deployments and confirm which are running versions 1.0.0 through 1.12.2; immediately restrict network access to those instances so they are reachable only from trusted management networks or VPN, and specifically eliminate any internet-facing exposure. In parallel, enforce authentication on every instance, remove or rotate default and shared credentials, disable open self-registration, and audit accounts and flows for unexpected creation or modification that could indicate abuse of the code-generation path. Within 7 days, apply the vendor-released patch for Langflow OSS (Patch available per vendor advisory, covering the affected 1.0.0-1.12.2 range), validate the resulting version, and where patching cannot be completed immediately, keep the network-level restrictions in place and reduce the Langflow service account's OS privileges to the minimum required. Within 30 days, complete patching across all remaining instances including development, staging, and tenant environments; add Langflow version and exposure checks to continuous asset management; enforce least-privilege and role separation so low-privileged users cannot reach flow code generation or execution; and monitor and alert on anomalous command execution or flow edits on Langflow hosts as an ongoing detection control.

IBM Langflow OSS CVE-2026-97674

EUVD-2026-94122 HIGH

Code Injection (CWE-94)

2026-10-06 ibm

GHSA-x724-4ccj-hq65

RCE Command Injection IBM Code Injection Langflow Oss

8.1

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

8.8 HIGH

Network-reachable, low-complexity, authenticated (PR:L) arbitrary OS command execution yields full host compromise, so C/I/A all High; A raised to H versus input A:N since command execution enables service disruption.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Oct 07, 2026 - 00:50 vuln.today

CVE Published

Oct 06, 2026 - 23:59 cve.org

HIGH 8.1

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

AnalysisAI

Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.12.2 lets any holder of valid credentials - even a low-privileged one - submit or edit a flow that reaches the server-side code-generation and execution path, resulting in arbitrary OS command execution on the Langflow backend. IBM scores it 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) and classifies the root cause as CWE-94 code injection; no public exploit code has been identified at time of analysis and there is no CISA KEV listing, so active exploitation is not confirmed. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires an authenticated session (PR:L) on the Langflow OSS backend (versions 1.0.0-1.12.2) and the ability to submit or edit a flow/component that reaches the server-side code-generation and execution path - the mechanism Langflow uses to build and run LLM/agent flows. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	This is a credible, actionable priority rather than a paper-tiger high-CVSS issue, though it is gated by authentication. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the fix available per IBM's vendor advisory at https://www.ibm.com/support/pages/node/7290694; the advisory covers the affected 1.0.0-1.12.2 range and identifies the remediated release, with the exact fixed version number not enumerated in the available data, so confirm it against the advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all Langflow OSS deployments and confirm which are running versions 1.0.0 through 1.12.2; immediately restrict network access to those instances so they are reachable only from trusted management networks or VPN, and specifically eliminate any internet-facing exposure. …

Threat intelligence, references, and detailed analysis are available after sign-in.