Loading story…
IBM released security updates for critical and high-severity vulnerabilities affecting Langflow OSS, IBM MQ, and IBM Sterling File Gateway. Langflow OSS versions 1.0.0 through 1.10.0 are vulnerable to CVE-2026-12944 (CVSS 9.6), where an incomplete dangerous-import blocklist can let authenticated users submit components that make network connections during server-side validation. Exploitation could enable SSRF against cloud metadata services, reverse shells, file exfiltration, access to internal Docker services, and code execution as root; IBM recommends upgrading to Langflow OSS 1.10.1. IBM MQ's JMS client is affected by CVE-2026-13293 (CVSS 8.8), a Java deserialization allowlist-bypass flaw that can allow an authenticated remote attacker to execute arbitrary code when a target consumes JMS ObjectMessages.
IBM also addressed nine vulnerabilities across MQ middleware releases, including critical CVE-2026-11381 and high-severity CVE-2026-11375 and CVE-2026-11378, which may permit authenticated remote code execution, as well as CVE-2026-11726, which may expose protected information. Updates are available for supported IBM MQ 9.1 through 9.4 LTS releases; Continuous Delivery and IBM MQ 10.0 users should move to 10.0.0.5. Separately, CVE-2026-19290 (CVSS 7.5) allows unauthenticated remote access to sensitive information in Sterling File Gateway versions 6.2.0.0–6.2.0.6_1, 6.2.1.0–6.2.1.2, and 6.2.2.0–6.2.2.1; customers should apply APAR IT49875 by upgrading to 6.2.0.6_2, 6.2.1.2_1, or 6.2.2.1_1. No workarounds were provided, and IBM had not reported active exploitation of the MQ flaws.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published AV26-922, advising administrators to review IBM advisories and apply updates for affected Langflow OSS, IBM MQ, and IBM Sterling File Gateway releases. The advisory highlighted CVE-2026-13293 in IBM MQ and CVE-2026-19290 in Sterling File Gateway.
IBM disclosed CVE-2026-13293, a CVSS 8.8 Java deserialization allowlist-bypass flaw in the IBM MQ JMS client. A remote authenticated attacker could execute arbitrary code on systems consuming JMS ObjectMessages; IBM issued cumulative security updates for supported LTS releases and directed CD and 10.0 users to upgrade to 10.0.0.5.
IBM published a bulletin for CVE-2026-19290, a CVSS 7.5 improper-access-control vulnerability in Sterling File Gateway that could let an unauthenticated remote attacker obtain sensitive information. IBM provided APAR IT49875 and fixed releases for affected 6.2.0.x, 6.2.1.x, and 6.2.2.x versions.
IBM disclosed CVE-2026-12944 in Langflow OSS, affecting versions 1.0.0 through 1.10.0. The incomplete security-scanner blocklist could allow authenticated users to trigger server-side network actions and potentially execute Python code as root; IBM recommended upgrading to version 1.10.1.
IBM MQ security updates were reported to remediate nine vulnerabilities, including critical CVE-2026-11381 and additional high-severity flaws CVE-2026-11375, CVE-2026-11378, and CVE-2026-11726. Fixes were available in MQ 9.1.0.38, 9.2.0.44, 9.3.0.42, and 9.4.0.26 LTS releases, while CD and 10.0.0.0 users were directed to upgrade to 10.0.0.5.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
heise.de
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourceibm.com
Open sourceibm.com
Open sourceibm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
IBM released security updates for multiple products after disclosures covering at least 21 high-severity vulnerabilities across **Langflow OSS**, **Application Gateway Operator**, **QRadar**, and **WebSphere Application Server**. The issues span remote code execution, arbitrary file read/write, information disclosure, security restriction bypass, and server-side request forgery, with national CERT and CSIRT notices urging organizations to apply IBM’s bulletins and upgrade affected deployments. Among the disclosed flaws, `CVE-2026-17624` affects **IBM Langflow OSS** versions `1.0.0` through `1.10.3` and allows a remote authenticated attacker to execute arbitrary code through improper validation of module imports in component generation, validation, and custom component handling. `CVE-2026-17617` affects **IBM Application Gateway Operator** versions `22.2.0` through `26.06` and enables SSRF through insufficient validation of URLs in custom resources; additional affected products include **QRadar** `7.6.0.1` and earlier in the `7.6.x` branch, **QRadar** `7.5.0 UP 15 IF05` and earlier in the `7.5.x` branch, **WebSphere Application Server** `8.5` and `9.0`, and **WebSphere Liberty Continuous Delivery`.
Aug 8, 2026
IBM disclosed multiple severe vulnerabilities in **Langflow OSS** affecting versions `1.0.0` through `1.10.1`, including remote code execution, denial of service, path traversal, unauthorized file and vector store access, build job information disclosure, and exposed credentials through unauthenticated or insufficiently authorized API endpoints. The most prominent issue, **`CVE-2026-13446`**, is a hard-coded credentials flaw classified as **CWE-798** and scored **CVSS 9.8**, creating a network-exploitable path to compromise confidentiality, integrity, and availability. According to IBM's bulletin, the vulnerable endpoints could let attackers execute code, read arbitrary files, access secrets, modify other users' data, and cancel active builds without proper authorization. IBM advised users to upgrade Langflow OSS to **`1.10.2`** to remediate the issues, as the affected releases expose both application internals and connected external components to critical compromise.
Jul 18, 2026
IBM disclosed five high-severity vulnerabilities in **Langflow OSS** affecting versions `1.0.0` through `1.10.0`, including multiple paths to **remote code execution**, privilege escalation, and arbitrary file write. The issues are tracked as `CVE-2026-9135`, `CVE-2026-8476`, `CVE-2026-8481`, `CVE-2026-8635`, and `CVE-2026-8859`. Reported weaknesses include code injection through unvalidated dynamic `CodeInput` fields in the Policies component, unsafe `pickle.loads()` deserialization in the disk cache, direct execution of user-supplied Python in the `/api/v1/validate/code` endpoint, database manipulation that can elevate an authenticated user to superuser, and path traversal in the APIRequest component's **Save to File** feature via crafted `Content-Disposition` filenames. Several of the flaws require only authenticated access and can lead to arbitrary Python or system command execution with the privileges of the Langflow server process, creating a path to full host compromise in some deployments. IBM released **Langflow OSS `1.10.1`** to address all five vulnerabilities and advised organizations to upgrade immediately; additional mitigation guidance includes reviewing file-system permissions and sanitizing or removing cached data where possible. Public reporting said no active exploitation had been confirmed at publication time.
Jul 19, 2026