CVE-2026-10561: IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows…

PriorityP277critical10CVSS 3.1

AVNACLPRNUINSCCHIHAH

EPSS

0.50%

39.1th percentile

IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	langflow_oss	1.0.0 – 1.9.3	—
langflow	langflow	1.0.0 – 1.9.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.