CVE-2026-76059: Langflow

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.

Affected products

• Langflow Langflow: from 1.0.0, before 1.11.6 (fixed in 1.11.6)

Published 2026-09-10. Last modified 2026-09-16.