CVE-2026-76059
published 2026-09-10CVE-2026-76059: IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an…
PriorityP261high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.68%
50.4th percentile
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | langflow_oss | 1.0.0 – 1.11.5 | — |
| langflow | langflow | >= 1.0.0 < 1.11.6 | 1.11.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Langflow OSS up to 1.11.5 access control
vuldb·2026-09-11·CVSS 8.8
CVE-2026-76059 [HIGH] IBM Langflow OSS up to 1.11.5 access control
A vulnerability, which was classified as critical, has been found in IBM Langflow OSS up to 1.11.5. This issue affects some unknown processing. The manipulation leads to improper access controls.
This vulnerability is listed as CVE-2026-76059. The attack may be initiated remotely. There is no available exploit.
GHSA
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to
ghsa_unreviewed·2026-09-11
CVE-2026-76059 [HIGH] CWE-693 IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-10
Published