CVE-2026-12944
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
CVSS Score
9.6
EPSS Score
0.2%
EPSS Percentile
16th
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.
| CWE | CWE-918 |
| Vendor | ibm |
| Product | langflow oss |
| Published | Sep 14, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm langflow oss
Be the first to know when new critical vulnerabilities affecting ibm langflow oss are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
IBM / Langflow OSS
1.0.0 ≤ 1.10.0
Credits
🔍 CVE-2026-12944 was reported to IBM by KIM MINJUN (GitHub: 31n6).