Executive brief
IBM Langflow OSS, a tool used for building AI and machine learning workflows, is vulnerable to a flaw that allows attackers to run unauthorized code on the host system. By submitting a specially crafted workflow node that bypasses security checks, an attacker can take full control of the application environment. This could lead to the theft of sensitive data, service disruption, or further compromise of the underlying infrastructure.
Technical details
A remote code execution vulnerability exists in IBM Langflow OSS versions 1.0.0 through 1.10.0 due to improper input validation (CWE-20) in the flow validation logic. The application fails to properly validate flow nodes when the 'component type' field is missing or empty, causing the validator to skip security checks even when custom components are disabled. An unauthenticated attacker can exploit this by submitting a malicious flow node containing executable code, which is then processed and executed at build time. This allows for full system compromise with a CVSS score of 9.8. The issue is resolved in version 1.10.1.
Affected products
- IBM Langflow OSS 1.0.0 - 1.10.0
Timeline
- 2026-06-29: advisory: Initial publication by IBM
- 2026-06-30: disclosed: NVD publication date
- 2026-06-30: patched: Fix available in version 1.10.1