Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-81941— Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Quick assessment

Affected
IBM Langflow OSS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

以下是该漏洞描述信息的中文翻译： IBM Langflow OSS 1.0.0 至 1.11.5 版本允许经过身份验证的非管理员用户通过构建一个配置为使用本地 stdio 子进程传输机制的 MCP Tools 组件的流程，以应用进程的权限级别在服务器上执行任意操作系统命令。这一漏洞绕过了旨在防止此类访问的两个服务端控制措施： 和 。成功利用该漏洞可能导致：任意命令执行、敏感数据泄露（包括进程环境变量中的凭证）、文件系统修改，以及向服务器可访问的服务进行横向移动。 --- 关键术语说明： MCP Tools comp

CVSS 8.8 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-81941

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess transport. This bypasses both the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY and LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS server-side controls intended to prevent exactly this class of access. Successful exploitation could lead to arbitrary command execution, sensitive data exposure (including credentials from the process environment), file system modification, and lateral movement to services reachable from the server.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
IBM Langflow OSS 1.0.0 ~ 1.11.5 cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-81941

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-81941

请登录查看更多情报信息。

Other References for CVE-2026-81941 (1)

Same Patch Batch · IBM · 2026-09-10 · 49 CVEs total

CVE-2026-81204 9.8 CRITICAL Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-79724 9.8 CRITICAL Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-85025 9.8 CRITICAL Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-78573 9.8 CRITICAL IBM ContextForge MCP Gateway is affected by use of default credentials
CVE-2026-82100 9.6 CRITICAL DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-82107 9.6 CRITICAL DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-80424 9.1 CRITICAL DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-19646 9.1 CRITICAL Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a
CVE-2026-78569 8.8 HIGH Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-81211 8.8 HIGH Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-82099 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-82098 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-81550 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-81551 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-81554 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-81940 8.8 HIGH Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit
CVE-2026-82092 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-82095 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-82097 8.8 HIGH DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-78571 8.8 HIGH Langflow is vulnerable to arbitrary code execution due to multiple incomplete code securit

Showing top 20 of 49 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Langflow OSS
Same vendor: IBM
Same weakness: CWE-284

V. Comments for CVE-2026-81941

No comments yet

Leave a comment