takenaka hiroya@Joe_Biden_ja
Langflow 1.0.0〜1.12.4 に、公開ワークフローに保存されたコードを認証なしで実行させられる脆弱性（CVE-2026-18894・CVSS 9.8）。1.12.5 への更新と緩和策をまとめました。 https://ai-news.autoarticles.net/article/post_1793544519945_xv02o8
0000055
558 followersView on X
CVE-2026-18894(langflow / langflow)
LOWCVSS 9.8 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-94
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- langflow
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
langflow
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |