Search CVEs, research… / diras.sa
  • PoC PUBLIC
  • PATCH AVAILABLE

CVE-2026-19295: authenticated os command execution in IBM Langflow OSS

Authenticated users with the ability to create or save flows can cause the Langflow OSS server process to run arbitrary operating-system commands, tracked as CVE-2026-19295. The issue impacts Langflow OSS releases from 1.0.0 through 1.11.1. Exploitation is achieved by storing a specially crafted flow (malformed type field) and then triggering a build of another flow that references it, which leads to execution of commands under the server process identity. An attacker must hold a valid account that can save flows on the target instance.

Published Updated Source: CVE Program, NVD, FIRST EPSS, Vendor advisory

CVSS 3.1
9.9CRITICAL
EPSS
0.03269
CWE
CWE-95
KEV DUE DATE
Not listed
PATCH
Available

DIRAS TAKE

Urgent: public exploit code exists for this high-severity RCE—immediately limit access to Langflow OSS and prioritize applying vendor fixes or mitigations. Internet-facing or broadly accessible deployments are especially at risk.

What is CVE-2026-19295?

Authenticated users with the ability to create or save flows can cause the Langflow OSS server process to run arbitrary operating-system commands, tracked as CVE-2026-19295. The issue impacts Langflow OSS releases from 1.0.0 through 1.11.1. Exploitation is achieved by storing a specially crafted flow (malformed type field) and then triggering a build of another flow that references it, which leads to execution of commands under the server process identity. An attacker must hold a valid account that can save flows on the target instance.

Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Which versions of IBM Langflow OSS are affected?

BRANCHAFFECTEDFIXED
1.x1.0.0 – 1.11.1

Is CVE-2026-19295 being exploited?

Public exploit code is available.

How to fix CVE-2026-19295

  1. Limit network exposure: block or restrict access to Langflow OSS to trusted networks and require VPN or firewall protections.
  2. Harden accounts: revoke or tighten permissions for users who can create or save flows and enforce least privilege.
  3. Apply vendor guidance: install any official patches or updates from the vendor as soon as they are published.
  4. Monitor and investigate: check server logs for unexpected flow saves or suspicious process activity and rotate credentials if compromise is suspected.

Frequently asked questions

Is CVE-2026-19295 being actively exploited?

Public exploit code is available for CVE-2026-19295, increasing the likelihood of active exploitation.

Which Langflow OSS versions are affected by CVE-2026-19295?

Langflow OSS versions 1.0.0 through 1.11.1 are reported as affected by CVE-2026-19295.

Is there a patch for CVE-2026-19295?

A patch status is reported as available in the facts, but no fixed version is listed for the affected branch; follow vendor guidance and apply official updates when provided.

Does CVE-2026-19295 require authentication?

Yes. CVE-2026-19295 requires an authenticated account with permission to save or create flows on the Langflow OSS server.

References