CVE-2026-12946— Remote Code Execution in CUGA Component CodeAgent
Quick assessment
Affected
IBM Langflow OSS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Langflow OSS 1.0.0 至 1.10.0 版本存在远程代码注入漏洞。由于对用户输入的代码控制不当，远程攻击者可能利用此漏洞在系统中注入任意代码。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0≤ 1.10.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-12946
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote Code Execution in CUGA Component CodeAgent
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 ~ 1.10.0 |
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-12946
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12946
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-12946 (1)
-
🔗 Security Bulletin: Remote Code Execution in CUGA Component CodeAgent Read full article vendor-advisory patch
Same Patch Batch · IBM · 2026-07-30 · 35 CVEs total
| CVE-2026-13435 | 9.9 CRITICAL | Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure |
| CVE-2026-15435 | 9.8 CRITICAL | IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability |
| CVE-2026-12943 | 9.8 CRITICAL | This Power Hardware Management Console update is being released to address |
| CVE-2026-12118 | 9.8 CRITICAL | IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbit |
| CVE-2026-12940 | 9.8 CRITICAL | Langflow is affected by remote code execution due to multiple unauthenticated and insuffic |
| CVE-2026-11707 | 9.3 CRITICAL | Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped |
| CVE-2026-14522 | 8.8 HIGH | IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes t |
| CVE-2026-11536 | 8.5 HIGH | IBM WebSphere Application Server is affected by a remote code execution vulnerability |
| CVE-2026-10535 | 8.4 HIGH | IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to pri |
| CVE-2026-11885 | 8.4 HIGH | Power System update in Buffer Copy |
| CVE-2026-14980 | 8.3 HIGH | IBM WebSphere Application Server Liberty is affected by a cross-site request forgery |
| CVE-2026-14519 | 7.5 HIGH | IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes t |
| CVE-2024-25039 | 7.5 HIGH | IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple |
| CVE-2026-10545 | 7.5 HIGH | IBM Planning Analytics Local is affected by Open Redirect |
| CVE-2026-12733 | 7.5 HIGH | IBM DataPower Gateway affected by denial of service |
| CVE-2026-12942 | 7.5 HIGH | Langflow is affected by path traversal due to multiple unauthenticated and insufficiently |
| CVE-2026-9322 | 7.5 HIGH | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by |
| CVE-2026-10842 | 7.5 HIGH | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by |
| CVE-2026-16308 | 7.5 HIGH | IBM Enterprise Build of Quarkus is affected by a DoS vulnerability |
| CVE-2026-11897 | 7.5 HIGH | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Langflow OSS
-
CVE-2026-12944
Incomplete Security Scanner Blocklist Enables Network-Based -
CVE-2026-12763
Langflow is vulnerable to authentication bypass and insuffic -
CVE-2026-12765
Langflow OSS is affected by server-side request forgery due -
CVE-2026-12766
Langflow is vulnerable to Server-Side Request Forgery due to -
CVE-2026-12767
Langflow is vulnerable to server-side request forgery due to
Same vendor: IBM
-
CVE-2026-93030
FortiManager 4.x XML外部实体注入漏洞 -
CVE-2026-93306
This Power System update is being released to address -
CVE-2026-84862
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84882
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84884
IBM Guardium Data Protection is affected by multiple vulnera
Same weakness: CWE-94
-
CVE-2026-84154
Code Injection vulnerability affecting GEOVIA Geospatial Dat -
CVE-2026-93348
Unsloth Zoo Code Injection via model_type in config.json -
CVE-2026-90926
Code Injection in Innotim Software's Logsign SIEM -
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox -
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engi
V. Comments for CVE-2026-12946
No comments yet