Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-22 | 3 | Disclosure1Patch2 |
| 2026-06-23 | 2 | Disclosure2 |
| 2026-06-24 | 1 | Patch1 |
| 2026-06-25 | 1 | Patch1 |
| 2026-07-16 | 4 | Disclosure2Patch2 |
A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now. #Langflow #RCE #CyberSecurity #CVE #PatchNow https://securityonline.info/langflow-rce-vulnerability https://t.co/OzM8MymtiJ
Post summary
The tweet announces CVE-2026-10561, a critical unauthenticated RCE in Langflow, and urges users to upgrade to version 1.9.4.
🚨 CVE-2026-10561 — CVSS 10/10 ██████████ IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/vcsgJ9XZoL
Post summary
A critical vulnerability (CVE-2026-10561) in IBM Langflow OSS, rated CVSS 10/10, has been disclosed with an immediate patch available.
Source: X search for vulnerability critical 2026 Posted: 2026-06-25T01:57:22.000Z Likes: 13 0day Intel: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enable
Post summary
The post announces a critical remote code execution vulnerability (CVE-2026-10561) in Langflow with a CVSS score of 10, but does not provide PoC, exploit details, or mitigation information.
Full Tweet A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now.
Post summary
The tweet announces CVE-2026-10561 as a critical RCE in Langflow with CVSS 10 and urges users to upgrade to version 1.9.4.
0day Intel: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enable
Post summary
The tweet announces a 0day CVE-2026-10561, a critical Langflow RCE with CVSS 10, but provides no PoC, exploit code, or patch information.
CVE-2026-10561: A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now. #Langflow #RCE #CyberSecurity #CVE #PatchNow (1.9.4)
Post summary
The post urges users to upgrade to Langflow 1.9.4 to fix CVE-2026-10561, a critical unauthenticated remote code execution flaw.
🐍 Unauthenticated RCE in IBM Langflow OSS (v1.0.0-1.9.3). CVE-2026-10561 scores a perfect CVSS 10: auth bypass + builtins injection via PythonREPLComponent = full system compromise, no creds needed. Patch now. #cybersecurity #infosec https://secalerts.co/vulnerability/CVE-2026-10561?utm_campaign=x https://t.co/FiP6trDQkO
Post summary
A critical unauthenticated RCE (CVE-2026-10561) in IBM Langflow OSS is disclosed, with a CVSS score of 10; a patch is immediately available.
#CVE-2026-10561 - Critical auth bypass in #IBM Langflow. Unauthenticated #RCE via #Python execution isolation flaw. #CVSS 10.0. No patch available—disconnect or mitigate immediately. #CVEAlert #infosec #sysadmin #devops #devsecops #developers more detailed info: https://www.valtersit.com/cve/CVE-2026-10561
Post summary
CVE‑2026‑10561 is a critical auth bypass in IBM Langflow that enables unauthenticated RCE via a Python isolation flaw; with no patch available, administrators should disconnect or mitigate immediately.
🚨 CRITICAL: IBM Langflow — CVSS 10.0 Unauthenticated RCE CVE-2026-10561 (CVSS 10.0) + CVE-2026-33017 (CVSS 9.3/10.0) Attacker sends one HTTP request → Python exec() → full system takeover. 🔗 https://threataft.com/articles/ibm-langflow-cve-2026-10561-unauthenticated-rce-ai-platform #CyberSecurity #ThreatIntel #infosec #AIsecurity
Post summary
The post announces two critical unauthenticated RCE vulnerabilities in IBM Langflow, detailing severity scores and a simple HTTP request exploitation vector, but offers no PoC, exploit code, or patch information.
🚨Critical - IBM Langflow OSS Unauthenticated RCE (CVE-2026-10561) IBM Langflow OSS 1.0.0 through 1.9.3 suffers from improper isolation of Python execution combined with an authentication bypass. This allows an unauthenticated remote attacker to execute arbitrary code on the host system, resulting in full compromise. Severity: Critical (CVSS 10.0) 👉Affected: IBM Langflow OSS <= 1.9.3 Action: Upgrade to the latest patched version ץ
Post summary
IBM Langflow OSS <=1.9.3 is vulnerable to unauthenticated remote code execution due to improper Python isolation and an authentication bypass; users are urged to upgrade to a patched release.
A new vulnerability with increased severity was disclosed for IBM Langflow OSS (CVE-2026-10561) https://vuldb.com/vuln/372672
Post summary
A new IBM Langflow OSS vulnerability (CVE-2026-10561) with increased severity has been disclosed, with a link to its details but no additional technical or exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |