Is CVE-2026-81941 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-81941 being exploited in the wild.

How severe is CVE-2026-81941?

High severity, with a CVSS score of 8.8, published 10 September 2026.

Which products and versions are affected?

IBM Langflow OSS 1.0.0 through 1.11.5.

Is there a fix for CVE-2026-81941?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-81941 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-81941?

Check whether you run IBM Langflow OSS or Langflow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-81941: IBM Langflow OSS privilege escalation in MCP Tools component

CVE-2026-81941 · Severity: high · CVSS 8.8 · Published 2026-09-10

IBM Langflow is a low-code platform for building AI assistant workflows. An authenticated user without administrative privileges can bypass security controls and execute arbitrary operating system commands by creating a workflow that uses the MCP Tools component with local subprocess transport. Exploitation can lead to unauthorized command execution, credential theft, file modification, and lateral movement within the network.

Technologies: IBM Langflow OSS, Langflow. Vendors: IBM, Langflow.

Quick answers

Is CVE-2026-81941 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-81941 being exploited in the wild.
How severe is CVE-2026-81941?: High severity, with a CVSS score of 8.8, published 10 September 2026.
Which products and versions are affected?: IBM Langflow OSS 1.0.0 through 1.11.5.
Is there a fix for CVE-2026-81941?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-81941 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-81941?: Check whether you run IBM Langflow OSS or Langflow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an authorization bypass (CWE-284) in IBM Langflow OSS versions 1.0.0 through 1.11.5. The MCP Tools component circumvents server-side execution controls (LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS) when invoked through a flow, allowing authenticated non-admin users to execute arbitrary OS commands at the privilege level of the application process. The attack requires authentication but no special user interaction. Successful exploitation grants full command execution capability, enabling sensitive data exposure from process environment, file system modification, and lateral movement to networked services. A patch is required to enforce execution policy checks on the MCP Tools component.

Affected products

IBM Langflow OSS 1.0.0 through 1.11.5

Timeline

2026-09-10: disclosed

References

https://www.ibm.com/support/pages/node/7286666

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.