@IBM's @langflow_ai scanner said validated. The CVE is 9.6 anyway. CVE-2026-12944 (CVSS 9.6, authenticated): Langflow OSS 1.0.0 through 1.10.0. An authenticated user could submit a flow component the scanner marked validated while network standard-library code still ran as UID 0. IBM's fix for that row is 1.10.1. Take 1.10.3 for CVE-2026-17628 (password-reset miss). No confirmed exploitation on 12944 yet. A green validated badge is a blocklist, not a sandbox. This is not CVE-2026-0768 (the unauthenticated Langflow RCE @cloudsa watched harvesting cloud keys in August). Same host, different class. Rotate keys after you upgrade. Primary (IBM bulletin): https://www.ibm.com/support/pages/security-bulletin-incomplete-security-scanner-blocklist-enables-network-based-code-execution-0 Write-up: https://hackerlogs.com/blog/langflow-cve-2026-12944/
Post summary
The tweet discloses CVE‑2026‑12944, an authenticated CVSS 9.6 code execution vulnerability in Langflow OSS 1.0.0‑1.10.0 caused by a scanner‑validated blocklist, and notes that IBM has released fixes (1.10.1 for this CVE and 1.10.3 for a related issue) with no confirmed exploitation yet.