Redpacketsecurity Multiple High-Risk Vulnerabilities Found in IBM Langflow OSS
Article Content
- •IBM Langflow OSS has multiple high-risk vulnerabilities allowing remote code execution.
- •Affected versions include 1.0.0 through 1.12.2; organizations should prioritize patching.
- •No active exploitation confirmed, but remediation is urgent due to potential impacts.
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by several vulnerabilities, including CVE-2026-93443, CVE-2026-93445, CVE-2026-97676, and others, which allow remote authenticated attackers to execute arbitrary code or access sensitive information. The vulnerabilities stem from improper control of code generation, insufficient credential protection, and improper input validation. Affected organizations include those self-hosting visual AI and workflow-building platforms, particularly those with internet-accessible deployments. Exploitation methods typically require only low-privilege accounts and do not necessitate user interaction. The urgency of remediation is high, although active exploitation has not been confirmed. IBM has not provided detailed indicators of exploitation or proof-of-concept data for these vulnerabilities. Administrators are advised to upgrade to vendor-fixed releases and restrict network access to trusted users.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (14)
Following this threat?
Track IBM and CVE-2025-3248 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of IBM Langflow OSS are affected?
What should organizations do to mitigate these vulnerabilities?
Is there any evidence of active exploitation?
Continue Reading
Exploitation of Langflow Flaws via Commodity Crawlers Adversaries have exploited two known remote code execution vulnerabilities in the AI application platform Langflow, specifically CVE-2025-3248 and CVE-2026-0770. These exploits were detected during a period of active commodity crawling, with 3,968 and 4,770 connection attempts recorded respectively. Approximately 95%… 
AI-Discovered Vulnerabilities Surge, Increasing RCE Threats Google's Threat Intelligence Group (GTIG) reports that software vulnerability disclosures doubled from 5,045 in January 2026 to 10,740 in August 2026, largely influenced by AI-assisted discovery. Notably, 50% of AI-discovered vulnerabilities enable remote code execution (RCE), compared to 26% of non-AI…