IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Critical 9.8Patch available
CVE-2026-104317
Langflow — remote code execution.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
WeaknessCWE-502: Unsafe deserialization
Published Updated Source NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.6%
Higher than 48% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Available
See the vendor advisory
What happened
What to do
- 01Check whether you run Langflow, and which version.
- 02Install the fixed version listed in the vendor advisory.
References
Timeline · UTC
- Published to NVD
- NVD record updated
Also actively exploited
Other CVEs in Langflow
9 more CVEs, 2 actively exploited
8.4Langflow Langflow — Authorization Bypass Through User-Controlled Key.ExploitedEPSS 0.9%9.8Langflow Langflow — Inclusion of Functionality from Untrusted Control Sphere.ExploitedEPSS 63%9.8Langflow — code injection.EPSS 0.5%9.8Langflow — remote code execution.EPSS 15%9.8Langflow — remote code execution.EPSS 0.6%9.8Langflow — remote code execution.EPSS 0.7%