Vulnerability · Published Jun 22, 2026 · Assigned by ibm
CVE-2026-10561Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection
Critical 10.0
In plain English
A critical-severity code injection in Langflow OSS from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)0.8%top 42.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | langflow | 1.10.1 | GHSA-8qpj-27x8-pwpq |
| PyPI | langflow | 1.10.1 | PYSEC-2026-4231 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Langflow OSS | 1.0.0 – through 1.9.3 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7277242 vendor-advisory, patch