CVE-2026-12944Disclosure

MEDIUMCVSS 9.6 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

https://www.ibm.com/support/pages/node/7278919

Weakness type (CWE)

CWE-918

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
9 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 9 signals
Disclosure: 4 classified signals
Peaked 1d ago at 6 mentions (2026-09-16); latest day: 1
9 total mentions across 3 days

Deep dive

Activity timeline9 mentions / 3d

Signal classification3 categories

Disclosure

444.4%

Patch

444.4%

Exploit

111.1%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-15	2	Disclosure2
2026-09-16	6	Disclosure1Exploit1Patch4
2026-09-17	1	Disclosure1

Full discourse9 posts

Rıdvan Yağlı@ridvanyagli45d
Exploit
🔴 Langflow OSS ≤1.10.0'ı etkileyen CVE-2026-12944 (CVSS 9.6 CRITICAL) için PoC yayınlandı. Custom Component Scanner'ın urllib.request ve socket modüllerini engellememesi, authenticated saldırganların sunucu üzerinde Python kodu çalıştırarak dosya okumasına ve SSRF gerçekleştirmesine olanak sağlıyor. Bu açık IBM tarafından 1.10.1'de düzeltildi. https://github.com/cflowsec/CVE-2026-12944
Post summary
A PoC/exploit repo for CVE-2026-12944 (Langflow ≤1.10.0, CVSS 9.6) has been published on GitHub, enabling authenticated attackers to execute Python code, read files, and perform SSRF via the Custom Component Scanner; patched in version 1.10.1.
010133840
2.5K followersView on X
Daily CyberSecurity@Daily_CyberSec45d
Patch
A critical Langflow SSRF flaw (CVE-2026-12944) exposes cloud credentials and internal networks. Patch your Langflow OSS servers immediately. #Langflow #SSRF #CVE202612944 #CVE202617628 #Cybersecurity https://securityonline.info/langflow-ssrf-flaw-cve-2026-12944/
Post summary
The post discloses a critical Langflow SSRF flaw affecting CVE-2026-12944 and emphasizes immediate patching of Langflow OSS servers. It provides basic vulnerability type and impact details but no PoC, exploit tool, or active exploitation evidence.
00050475
13.0K followersView on X
VulnTracker@vuln_tracker44d
Patch
Langflow OSS's security scanner can be fooled and it tells you everything's fine (CVSS 9.6). CVE-2026-12944 lets attackers slip malicious components past the blocklist and run arbitrary Python code as root. That opens the door to AWS credential theft, file exfiltration, and lateral movement inside the Docker network while the scanner reports "validated: true." Affects Langflow OSS 1.0.0 through 1.10.0. Update now. Details: http://vulntracker.io/cves/CVE-2026-12944 #Langflow #CVE #AI #SupplyChainSecurity #InfoSec
Post summary
The CVE-2026-12944 vulnerability in Langflow OSS allows arbitrary code execution as root and is addressed by an explicit update recommendation, supported by technical details and CVSS scoring.
00001125
762 followersView on X
hackerlogs@hackerlogs44d
Patch
@IBM's @langflow_ai scanner said validated. The CVE is 9.6 anyway. CVE-2026-12944 (CVSS 9.6, authenticated): Langflow OSS 1.0.0 through 1.10.0. An authenticated user could submit a flow component the scanner marked validated while network standard-library code still ran as UID 0. IBM's fix for that row is 1.10.1. Take 1.10.3 for CVE-2026-17628 (password-reset miss). No confirmed exploitation on 12944 yet. A green validated badge is a blocklist, not a sandbox. This is not CVE-2026-0768 (the unauthenticated Langflow RCE @cloudsa watched harvesting cloud keys in August). Same host, different class. Rotate keys after you upgrade. Primary (IBM bulletin): https://www.ibm.com/support/pages/security-bulletin-incomplete-security-scanner-blocklist-enables-network-based-code-execution-0 Write-up: https://hackerlogs.com/blog/langflow-cve-2026-12944/
Post summary
The text describes CVE-2026-12944 in Langflow (CVSS 9.6, authenticated RCE via scanner blocklist bypass) and directs users to upgrade to fixed versions (1.10.1 and 1.10.3), while also noting no confirmed exploitation and distinguishing it from a related but separate CVE.
0001064
15 followersView on X
キタきつね@foxbook44d
Disclosure
CVE-2026-12944 (CVSS 9.6): Langflow SSRF Flaw Disclosed（CVE-2026-12944：LangflowにSSRFからroot権限のコード実行につながる重大な脆弱性） #SecurityOnline (Sep 16) https://securityonline.info/langflow-ssrf-flaw-cve-2026-12944/
Post summary
The tweet discloses CVE-2026-12944, a high‑severity SSRF flaw in Langflow that can lead to root code execution, providing CVSS score and vulnerability details but no exploit, PoC, or patch information.
00000266
5.0K followersView on X
hackerlogs@hackerlogs44d
Disclosure
@CISACyber Langflow's scanner said validated; CVE-2026-12944 is still CVSS 9.6. Incomplete blocklists are not sandboxes. Customers hold the keys when the OSS host is the foothold. https://nvd.nist.gov/vuln/detail/CVE-2026-12944
Post summary
The tweet discloses CVE-2026-12944 with a CVSS score of 9.6 and links to its NVD entry, indicating a high‑severity vulnerability, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000033
15 followersView on X
kokumօtօ@__kokumoto45d
Patch
Langflowに重大(Critical)な脆弱性。CVE-2026-12944はCVSSスコア9.6で、セキュリティスキャナの拒否リスト不足によるPythonコード投入からのコード実行。バージョン1.10.3で修正。 https://securityonline.info/langflow-ssrf-flaw-cve-2026-12944/
Post summary
The text reports a critical Langflow vulnerability, CVE-2026-12944, with CVSS 9.6 and describes Python code injection leading to code execution. It states that the vulnerability is fixed in version 1.10.3, making the primary classification Patch.
00000717
7.8K followersView on X
Security Arsenal, LLC@SecurityAr5840945d
Disclosure
🔒 #CyberSecurity CVE-2026-12944: IBM Langflow Root RCE — Detection, IMDS SSRF Containment, and R… "NVD published CVE-2026-12944 with a CVSS 9.6 Critical rating and a network-exploitable…" 🔗 https://securityarsenal.com/blog/cve-2026-12944-ibm-langflow-root-rce-detection-imds-ssrf-containment-and-remediation-guide #CyberSecurity #ThreatIntel #cve202612944 #critical #cve
Post summary
The tweet announces CVE-2026-12944 affecting IBM Langflow as a CVSS 9.6 Critical Root RCE vulnerability with network-exploitable characteristics, linking to a blog for further analysis, but does not reference active exploitation, named exploit tools, PoC code, or specific patches.
0000048
33 followersView on X
Upwind Security MDR@UpwindMDR45d
Disclosure
🚨Critical - IBM Langflow OSS Root RCE via Component Scanner Bypass (CVE-2026-12944) Langflow OSS 1.0.0-1.10.0 component validation relies on an incomplete security scanner blocklist; components importing socket or urllib can pass as “safe” and execute arbitrary Python code as root. Attackers can pivot to SSRF (AWS IMDSv1), steal creds, read container files, and reach internal PostgreSQL/Redis on the Docker network. 👉Affected: langflow 1.0.0-1.10.0
Post summary
The tweet discloses a critical root‑RCE in IBM Langflow OSS (CVE‑2026‑12944) caused by an incomplete security scanner blocklist that lets unsafe components execute arbitrary code, enabling SSRF and lateral movement. No PoC, exploit code, or patch information is provided.
0000075
304 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-12944

Rıdvan Yağlı[verified]@ridvanyagliExploit

A PoC/exploit repo for CVE-2026-12944 (Langflow ≤1.10.0, CVSS 9.6) has been published on GitHub, enabling authenticated attackers to execute Python code, read files, and perform SSRF via the Custom Component Scanner; patched in version 1.10.1.

VulnTracker[verified]@vuln_trackerPatch

The CVE-2026-12944 vulnerability in Langflow OSS allows arbitrary code execution as root and is addressed by an explicit update recommendation, supported by technical details and CVSS scoring.

hackerlogs[verified]@hackerlogsPatch

The text describes CVE-2026-12944 in Langflow (CVSS 9.6, authenticated RCE via scanner blocklist bypass) and directs users to upgrade to fixed versions (1.10.1 and 1.10.3), while also noting no confirmed exploitation and distinguishing it from a related but separate CVE.

キタきつね[verified]@foxbookDisclosure

The tweet discloses CVE-2026-12944, a high‑severity SSRF flaw in Langflow that can lead to root code execution, providing CVSS score and vulnerability details but no exploit, PoC, or patch information.

hackerlogs[verified]@hackerlogsDisclosure

The tweet discloses CVE-2026-12944 with a CVSS score of 9.6 and links to its NVD entry, indicating a high‑severity vulnerability, but provides no PoC, exploit, patch, or evidence of active exploitation.

kokumօtօ[verified]@__kokumotoPatch

The text reports a critical Langflow vulnerability, CVE-2026-12944, with CVSS 9.6 and describes Python code injection leading to code execution. It states that the vulnerability is fixed in version 1.10.3, making the primary classification Patch.

Security Arsenal, LLC[verified]@SecurityAr58409Disclosure

The tweet announces CVE-2026-12944 affecting IBM Langflow as a CVSS 9.6 Critical Root RCE vulnerability with network-exploitable characteristics, linking to a blog for further analysis, but does not reference active exploitation, named exploit tools, PoC code, or specific patches.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The tweet discloses a critical root‑RCE in IBM Langflow OSS (CVE‑2026‑12944) caused by an incomplete security scanner blocklist that lets unsafe components execute arbitrary code, enabling SSRF and lateral movement. No PoC, exploit code, or patch information is provided.