@IBM's @langflow_ai scanner said validated. The CVE is 9.6 anyway. CVE-2026-12944 (CVSS 9.6, authenticated): Langflow OSS 1.0.0 through 1.10.0. An authenticated user could submit a flow component the scanner marked validated while network standard-library code still ran as UID 0. IBM's fix for that row is 1.10.1. Take 1.10.3 for CVE-2026-17628 (password-reset miss). No confirmed exploitation on 12944 yet. A green validated badge is a blocklist, not a sandbox. This is not CVE-2026-0768 (the unauthenticated Langflow RCE @cloudsa watched harvesting cloud keys in August). Same host, different class. Rotate keys after you upgrade. Primary (IBM bulletin): https://www.ibm.com/support/pages/security-bulletin-incomplete-security-scanner-blocklist-enables-network-based-code-execution-0 Write-up: https://hackerlogs.com/blog/langflow-cve-2026-12944/