Critical Langflow OSS Flaws Enable Remote Code Execution; Upgrade to 1.12.3 or Later

IBM disclosed 25 vulnerabilities affecting Langflow OSS 1.0.0 through 1.12.2, including two critical remote code execution flaws, CVE-2026-104334 and CVE-2026-93674, each rated CVSS 9.8. IBM reports that both can be exploited remotely without authentication or user interaction. Other flaws enable unauthorized file access, information disclosure, cache manipulation, and denial of service. Italy’s CSIRT separately reported 24 vulnerabilities, including two critical and 18 high-severity issues, while Paraguay’s CERT highlighted three authenticated code-execution flaws rated 8.8 and a vertex-results cache access-control flaw rated 8.3. Guyana’s national CIRT also relayed the Langflow warnings alongside separate IBM DataPower Gateway advisories.

Prioritize upgrading affected deployments to Langflow OSS 1.12.3 or later; IBM lists no workarounds or mitigations. A secondary analysis recommends version 1.12.4 or later, restricting network exposure, and investigating suspicious activity. A public proof of concept for CVE-2026-93674 demonstrates authenticated blind command injection requiring valid credentials, which differs from IBM’s reported unauthenticated attack characteristics. That analysis identified no in-the-wild exploitation or CISA Known Exploited Vulnerabilities listing as of October 7, 2026; the national advisories provide no additional evidence of active exploitation.