CVE-2026-19295— Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement
Quick assessment
Affected
IBM Langflow OSS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Langflow OSS 版本 1.0.0 至 1.11.1 存在安全漏洞：经过身份验证的攻击者可以通过保存一个具有特制 字段值的流程，并触发引用该流程的包装流程构建，从而在服务进程中以操作系统级别执行任意命令。该漏洞使得权限提升成为可能——攻击者可以从“已验证的流程用户”身份升级为以服务端进程身份执行任意操作系统命令，并绕过了 策略控制的限制。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19295
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
动态执行代码中指令转义处理不恰当(Eval注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 ~ 1.11.1 |
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-19295
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19295
请登录查看更多情报信息。
Vendor Pages for CVE-2026-19295 (1)
Same Patch Batch · IBM · 2026-08-28 · 16 CVEs total
| CVE-2026-18527 | 9.9 CRITICAL | IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated pr |
| CVE-2026-19286 | 9.8 CRITICAL | Langflow is affected by multiple remote code execution vulnerabilities due to insufficient |
| CVE-2026-3627 | 9.1 CRITICAL | Multiple Vulnerabilities in IBM Concert Software |
| CVE-2026-18729 | 8.8 HIGH | Langflow is affected by multiple remote code execution vulnerabilities due to insufficient |
| CVE-2026-18904 | 8.2 HIGH | Langflow is affected by multiple authentication bypass, path traversal, authorization, and |
| CVE-2026-18891 | 8.2 HIGH | Langflow is affected by multiple authentication bypass, path traversal, authorization, and |
| CVE-2026-18899 | 7.5 HIGH | Langflow is affected by multiple authentication bypass, path traversal, authorization, and |
| CVE-2026-17203 | 7.5 HIGH | IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated pr |
| CVE-2026-16821 | 7.0 HIGH | Vulnerabilities in IBM AIX and PowerVM VIOS |
| CVE-2026-19294 | 6.4 MEDIUM | Langflow is affected by multiple authentication bypass, path traversal, authorization, and |
| CVE-2026-3686 | 6.2 MEDIUM | Vulnerabilities exists in IBM Cloud Pak for Data System |
| CVE-2025-64649 | 5.9 MEDIUM | Multiple Vulnerabilities in IBM Concert Software |
| CVE-2025-36290 | 5.9 MEDIUM | IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validat |
| CVE-2025-36271 | 5.9 MEDIUM | IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in |
| CVE-2026-18545 | 4.3 MEDIUM | Langflow is affected by multiple authentication bypass, path traversal, authorization, and |
IV. Related Vulnerabilities
Same product: Langflow OSS
-
CVE-2026-19294
Langflow is affected by multiple authentication bypass, path -
CVE-2026-19286
Langflow is affected by multiple remote code execution vulne -
CVE-2026-18904
Langflow is affected by multiple authentication bypass, path -
CVE-2026-18899
Langflow is affected by multiple authentication bypass, path -
CVE-2026-18891
Langflow is affected by multiple authentication bypass, path
Same vendor: IBM
-
CVE-2026-3686
Vulnerabilities exists in IBM Cloud Pak for Data System -
CVE-2026-3627
Multiple Vulnerabilities in IBM Concert Software -
CVE-2026-19294
Langflow is affected by multiple authentication bypass, path -
CVE-2026-19286
Langflow is affected by multiple remote code execution vulne -
CVE-2026-18904
Langflow is affected by multiple authentication bypass, path
Same weakness: CWE-95
-
CVE-2026-54569
SENAITE.CORE: Improper Neutralization of Directives in Dynam -
CVE-2026-75062
Eval Injection in google/langfun via default lf.query protoc -
CVE-2026-78136
CHIRP代码注入漏洞（eval注入） -
CVE-2026-61539
Xinference: Remote code execution via unsafe `eval()` in Lla -
CVE-2026-77810
Code Injection via Gremlin Query Passthrough in Amazon Athen
V. Comments for CVE-2026-19295
No comments yet