Skip to content
Multiple High-Risk Vulnerabilities Found in IBM Langflow OSS

Multiple High-Risk Vulnerabilities Found in IBM Langflow OSS

First seen 30 Oct 2026, 02:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 03:45 UTC
  • •IBM Langflow OSS 1.0.0 to 1.12.4 has critical vulnerabilities allowing remote code execution and unauthorized access.
  • •CVE-2026-110196 and CVE-2026-110245 were published on October 29, 2026, with high CVSS scores.
  • •Internet-facing deployments are at the highest risk; immediate patching is recommended.

IBM Langflow OSS versions 1.0.0 to 1.12.4 are affected by multiple high-risk vulnerabilities, including CVE-2026-110196, which allows remote code execution via low-privilege accounts, and CVE-2026-110245, which enables unauthorized access to sensitive information due to improper authentication. Both vulnerabilities were published on October 29, 2026, and are deemed high risk with CVSS scores of 8.8 and 7.5, respectively. Exploitation does not require user interaction and could lead to significant data breaches or service disruptions. Internet-facing deployments are particularly at risk, especially those connected to sensitive data. No exploitation status has been confirmed as KEV, SSVC, PoC, and EPSS indicators are absent. Immediate patching is advised to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-29
CVE-2026-110196 published
IBM disclosed a vulnerability allowing remote code execution via low-privilege accounts in Langflow OSS.
Redpacketsecurity
2026-10-29
CVE-2026-110245 published
IBM disclosed a vulnerability enabling unauthorized access to sensitive information in Langflow OSS.
Redpacketsecurity

More articles in this cluster (3)

Following this threat?

Track Langflow and CVE-2026-110196 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What versions of Langflow OSS are affected?
Langflow OSS versions 1.0.0 through 1.12.4 are affected by these vulnerabilities.
What should I do to mitigate these vulnerabilities?
Upgrade to the vendor-fixed release immediately and review access controls for low-privilege accounts.
Is there any confirmed exploitation of these vulnerabilities?
No confirmed exploitation has been reported, but the vulnerabilities are considered high risk.