NCSC-2026-0251 [1.00] [M/H] Vulnerabilities fixed in IBM Langflow OSS
IBM has fixed multiple vulnerabilities in IBM Langflow OSS versions 1.0.0 to 1.10.0. The vulnerabilities in IBM Langflow OSS include: - executing arbitrary file changes by authenticated users via specially crafted Content-Disposition headers - server-side request forgery (SSRF) due to insecure default configurations - remote code execution (RCE) due to insufficient validation of MCP server configuration files - authenticated users can read files, including the JWT signing key, allowing for the forgery of authentication tokens - a vulnerability in the apply_tweaks() function that allows parameter overriding via the API and unsafe deserialization in the AsyncDiskCache class that enables RCE - the POST /api/v1/validate/code endpoint executes user-provided Python code without sandboxing, which can grant full server control - the webhook authentication mechanisms can be bypassed if the WEBHOOK_AUTH_ENABLE parameter is set to False, allowing unauthenticated users to execute flows - there is also a privilege escalation possible to superuser by abusing Langflow service permissions - a path traversal vulnerability in the APIRequest component allows files to be written to unwanted locations - the /api/v1/login/auto_login endpoint can issue long-lived superuser tokens without authentication when the AUTO_LOGIN feature is enabled, further exacerbated by permissive CORS settings - the Policies component contains a code injection vulnerability in the ToolGuard integration, where authenticated users with flow creation rights can execute arbitrary Python code - unauthenticated attackers can obtain superuser tokens and thereby perform full remote code execution on default installations. They can also create an unlimited number of active user accounts if the NEW_USER_IS_ACTIVE parameter is set to true, allowing them to
CSIRTS triage
- What
- Multiple vulnerabilities allow for remote code execution, server-side request forgery, and unauthorized file access.
- Who is affected
- Users of IBM Langflow OSS versions 1.0.0 to 1.10.0 are affected.
- Urgency
- Remediation is high urgency due to the potential for severe exploitation and the presence of multiple vulnerabilities.
- Action
- Upgrade to the latest version of IBM Langflow OSS to mitigate these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Langflow OSS
Get an email when a new Langflow OSS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0251
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-76670.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-77540.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
- Low exploitation riskCVE-2026-77550.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all scored CVEs.
- Low exploitation riskCVE-2026-78720.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-80560.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Low exploitation riskCVE-2026-84760.49% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
- Low exploitation riskCVE-2026-84810.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
- Low exploitation riskCVE-2026-85050.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all scored CVEs.
- Low exploitation riskCVE-2026-86350.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Low exploitation riskCVE-2026-88590.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-7667 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-7754 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-7755 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-7872 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8056 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8476 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8481 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8505 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8635 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-8859 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-9103 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-9135 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-9198 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-9202 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-14499 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] IBM Langflow Desktop: Multiple vulnerabilitiescert-bund
- high[NEW] [high] IBM Langflow Desktop OSS: Multiple vulnerabilitiescert-bund
- criticalCVE-2026-8859: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files…nvd
- criticalCVE-2026-8635: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to supe…nvd
- criticalCVE-2026-8505: IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication …nvd
- criticalCVE-2026-8481: IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in…nvd
- criticalCVE-2026-8476: IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in…nvd
- highCVE-2026-8056: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component paramete…nvd
- highCVE-2026-7872: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files …nvd
- highCVE-2026-7755: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incompl…nvd
- highCVE-2026-7754: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (S…nvd
- highCVE-2026-7667: IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious fl…nvd
More from NCSC-NL Advisories
- unknownNCSC-2026-0274 [1.00] [M/H] Kwetsbaarheid verholpen in SolarWinds Web Help Desk2026-07-31
- unknownNCSC-2026-0273 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Campaign Classic2026-07-31
- unknownNCSC-2026-0272 [1.00] [M/H] Kwetsbaarheden verholpen in JFrog Artifactory2026-07-31
- unknownNCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Center2026-07-30
- unknownNCSC-2026-0270 [1.00] [M/M] Vulnerabilities fixed in GitLab by GitLab Inc.2026-07-30