IBM Langflow OSS EUVD-2026-67952

The CVSS vector confirms a valid low-privilege authenticated account on the IBM Langflow OSS instance is required (PR:L) - unauthenticated exploitation is not supported by available data. No user interaction from a second party is needed (UI:N), and no non-default configuration is indicated as a prerequisite; any authenticated user on an affected version appears to be a potential threat actor. Attack complexity is low (AC:L), meaning no race conditions, prior information gathering, or special environmental setup is required. Exploitation is limited to: (1) possession of a valid Langflow OSS account at any privilege level, and (2) network reachability to the instance. Hardening measures that restrict account provisioning (disabling open registration, enforcing MFA, limiting accounts to known users) directly reduce the realistic attacker pool beyond what the raw CVSS score conveys.

The CVSS 8.8 High rating is well-supported: the network attack vector (AV:N), low complexity (AC:L), and absence of user interaction (UI:N) mean exploitation is straightforward for any authenticated attacker. The low-privilege requirement (PR:L) is the primary friction point and the single most meaningful limiting factor relative to a full PR:N flaw. Full C:H/I:H/A:H impact means successful exploitation yields complete server compromise. No EPSS data was provided; no CISA KEV listing is present in the available data, and no publicly available exploit code is reported - these signals argue against active widespread exploitation at time of analysis, though the low complexity should be treated as a red flag for near-term POC emergence given the attack surface of a code-execution-first platform like Langflow. The IBM vendor advisory confirms patch availability, making this a patch-urgently scenario for any deployment serving untrusted or semi-trusted users rather than a theoretical risk.

An attacker with a low-privilege Langflow OSS account submits a crafted payload through a workflow node or component interface that embeds executable code into the platform's code-generation path. The server evaluates the injected code without adequate sandboxing, granting the attacker arbitrary command execution under the application process identity. No public exploit code is known at time of analysis, but the low attack complexity (AC:L) and well-understood CWE-94 class suggest a skilled attacker could develop a working exploit with limited effort.