CVE-2026-19295 CRITICAL

CVE-2026-19295: Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

Vendor Ibm
Product Langflow OSS
Weakness CWE-95 · Eval injection
Published August 28, 2026
Last update August 31, 2026
View on NVD All CVEs

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.

Key dates

02Disclosure timeline

August 28, 2026 CVE published
August 31, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-8512 W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution CVE-2024-10633 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content CVE-2024-3562 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE CVE-2026-45293 WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability