Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-22 | 3 | Disclosure1Patch2 |
| 2026-06-23 | 2 | Disclosure2 |
| 2026-06-24 | 1 | Patch1 |
| 2026-06-25 | 1 | Patch1 |
| 2026-07-16 | 4 | Disclosure2Patch2 |
| 2026-10-12 | 1 | PoC1 |
| 2026-10-19 | 1 | Patch1 |
A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now. #Langflow #RCE #CyberSecurity #CVE #PatchNow https://securityonline.info/langflow-rce-vulnerability https://t.co/OzM8MymtiJ
Post summary
The tweet announces CVE-2026-10561, a critical unauthenticated RCE in Langflow, and urges users to upgrade to version 1.9.4.
🚨 CVE-2026-10561 — CVSS 10/10 ██████████ IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/vcsgJ9XZoL
Post summary
A critical vulnerability (CVE-2026-10561) in IBM Langflow OSS, rated CVSS 10/10, has been disclosed with an immediate patch available.
#NØØT_Security_Alerts 🚨 #ALERT — CRITICAL LANGFLOW FLAW ENABLES HOST CODE EXECUTION AND SUPERUSER TAKEOVER September 28, 2026 DISCLOSED BY: Langflow Security Maintainers / XlabAI Research PRODUCT: Langflow — AI Workflow Platform CVE: CVE-2026-10561 GHSA: GHSA-8qpj-27x8-pwpq SEVERITY: Critical — CVSS 9.9 AFFECTED VERSIONS: Langflow before 1.10.1. Fixed in 1.10.1; further hardened through 1.12.3. IMPACT: Insufficient isolation in PythonREPLComponent and PythonREPLToolComponent allows arbitrary Python execution with Langflow service privileges. Attackers can execute OS commands, access application data and elevate their accounts to superuser through database manipulation. EXPOSURE: Requires an authenticated user able to edit and execute flows containing the vulnerable interpreter components. EXPLOITATION STATUS: PUBLIC RESEARCH PoC. Maintainers document a working privilege-escalation technique. No confirmed malicious in-the-wild exploitation. Forensic triage: Review unexpected Python Interpreter flow executions, suspicious service subprocesses, unauthorized database changes and modifications to is_superuser account attributes. No confirmed campaign-specific IOCs. URGENT ACTION: Upgrade to Langflow 1.12.3 or later. Disable interpreter execution where unnecessary. Use microVM isolation for untrusted code and enforce least-privilege service credentials. SOURCE: https://github.com/langflow-ai/langflow/security/advisories/GHSA-8qpj-27x8-pwpq CONFIDENCE: HIGH — Maintainer-confirmed vulnerability, documented PoC and upstream security fixes. #CyberSecurity #ThreatIntel #Langflow #AISecurity #RCE #PrivilegeEscalation
Post summary
Official security advisory for CVE-2026-10561, a critical RCE/privilege escalation flaw in Langflow with a public PoC, named fixes in 1.10.1+, specific workarounds, but no confirmed in-the-wild exploitation.
Source: X search for vulnerability critical 2026 Posted: 2026-06-25T01:57:22.000Z Likes: 13 0day Intel: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enable
Post summary
The post announces a critical remote code execution vulnerability (CVE-2026-10561) in Langflow with a CVSS score of 10, but does not provide PoC, exploit details, or mitigation information.
Full Tweet A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now.
Post summary
The tweet announces CVE-2026-10561 as a critical RCE in Langflow with CVSS 10 and urges users to upgrade to version 1.9.4.
0day Intel: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enable
Post summary
The tweet announces a 0day CVE-2026-10561, a critical Langflow RCE with CVSS 10, but provides no PoC, exploit code, or patch information.
CVE-2026-10561: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now. #Langflow #RCE #CyberSecurity #CVE #PatchNow (1.9.4)
Post summary
The post urges users to upgrade to Langflow 1.9.4 to fix CVE-2026-10561, a critical unauthenticated remote code execution flaw.
Running Langflow anywhere reachable from the internet? Two critical bugs to patch today 🧵 1/ CVE-2026-8505: in Langflow 1.7.0 through 1.9.0, webhook endpoints skipped the API key check by default. Anyone who knew a flow's ID could run it as you. Fixed in 1.9.1. https://vibevulns.com/issues/cve-2026-8505-langflow-webhook-auth-bypass-unauthenticated-flow-execution/?v=2 2/ CVE-2026-10561: before 1.10.1, the Python Interpreter component had no real sandbox. Any logged-in user who could edit a flow could run OS commands and make themselves superuser. https://vibevulns.com/issues/cve-2026-8505-langflow-webhook-auth-bypass-unauthenticated-flow-execution/?v=2 3/ Fix: upgrade to 1.12.3+ (the maintainers' recommendation), don't set LANGFLOW_WEBHOOK_AUTH_ENABLE=false, and turn off the interpreter if you don't use it (LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS=true).
Post summary
The text announces two critical Langflow vulnerabilities (CVE-2026-8505 and CVE-2026-10561) with technical details on auth bypass and sandbox escape, and emphasizes patching through specific version upgrades and configuration workarounds. The primary focus is on remediation actions.
🐍 Unauthenticated RCE in IBM Langflow OSS (v1.0.0-1.9.3). CVE-2026-10561 scores a perfect CVSS 10: auth bypass + builtins injection via PythonREPLComponent = full system compromise, no creds needed. Patch now. #cybersecurity #infosec https://secalerts.co/vulnerability/CVE-2026-10561?utm_campaign=x https://t.co/FiP6trDQkO
Post summary
A critical unauthenticated RCE (CVE-2026-10561) in IBM Langflow OSS is disclosed, with a CVSS score of 10; a patch is immediately available.
#CVE-2026-10561 - Critical auth bypass in #IBM Langflow. Unauthenticated #RCE via #Python execution isolation flaw. #CVSS 10.0. No patch available—disconnect or mitigate immediately. #CVEAlert #infosec #sysadmin #devops #devsecops #developers more detailed info: https://www.valtersit.com/cve/CVE-2026-10561
Post summary
CVE‑2026‑10561 is a critical auth bypass in IBM Langflow that enables unauthenticated RCE via a Python isolation flaw; with no patch available, administrators should disconnect or mitigate immediately.
🚨 CRITICAL: IBM Langflow — CVSS 10.0 Unauthenticated RCE CVE-2026-10561 (CVSS 10.0) + CVE-2026-33017 (CVSS 9.3/10.0) Attacker sends one HTTP request → Python exec() → full system takeover. 🔗 https://threataft.com/articles/ibm-langflow-cve-2026-10561-unauthenticated-rce-ai-platform #CyberSecurity #ThreatIntel #infosec #AIsecurity
Post summary
The post announces two critical unauthenticated RCE vulnerabilities in IBM Langflow, detailing severity scores and a simple HTTP request exploitation vector, but offers no PoC, exploit code, or patch information.
🚨Critical - IBM Langflow OSS Unauthenticated RCE (CVE-2026-10561) IBM Langflow OSS 1.0.0 through 1.9.3 suffers from improper isolation of Python execution combined with an authentication bypass. This allows an unauthenticated remote attacker to execute arbitrary code on the host system, resulting in full compromise. Severity: Critical (CVSS 10.0) 👉Affected: IBM Langflow OSS <= 1.9.3 Action: Upgrade to the latest patched version ץ
Post summary
IBM Langflow OSS <=1.9.3 is vulnerable to unauthenticated remote code execution due to improper Python isolation and an authentication bypass; users are urged to upgrade to a patched release.
A new vulnerability with increased severity was disclosed for IBM Langflow OSS (CVE-2026-10561) https://vuldb.com/vuln/372672
Post summary
A new IBM Langflow OSS vulnerability (CVE-2026-10561) with increased severity has been disclosed, with a link to its details but no additional technical or exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |