VulnSocial

CVE-2026-81204Disclosure(langflow / langflow)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch langflow langflow systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.

langflow CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • langflow

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-11); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
langflow
Products
langflow

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-11: 2Mentions · 2026-09-23: 1PoC Mentioned / Linked · 2026-09-11: 1Patch / Workaround · 2026-09-23: 1Technical Details · 2026-09-11: 1Technical Details · 2026-09-23: 109-1109-23
Signal classification3 categories
Disclosure
133.3%
PoC
133.3%
Patch
133.3%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-112
Disclosure1PoC1
2026-09-231
Patch1
Full discourse3 posts
  • Nxploited@Nxploited
    PoC

    #RCE | CVE-2026-85025 CVE-2026-79724 CVE-2026-81204 #Exploit #hacker https://t.co/WYzOqknNCx

    Post summary

    The tweet lists three RCE CVEs and cites a link that likely points to a PoC, but lacks any detailed exploit or patch information.

    00010141
    125 followersView on X
  • zoomeyebot@zoomeyebot
    Patch

    🚨 IBM Patches Critical Langflow OSS Remote Code Execution Flaws (CVE-2026-79724, CVE-2026-85025, CVE-2026-81204) Critical Vulnerability Alert! IBM Langflow OSS is affected by CVE-2026-79724. 🔍 Identify Targets via ZoomEye: Search Dork: app="Langflow" Exposure: 18.6k instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJMYW5nZmxvdyI%3D #Langflow #CVE202679724 #RCE #IBM

    Post summary

    IBM has released patches for critical Remote Code Execution vulnerabilities in Langflow OSS (CVE‑2026‑79724, CVE‑2026‑85025, CVE‑2026‑81204) and the advisory highlights the availability of the fixes.

    0000035
    24 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨Critical - IBM Langflow OSS Graph Construction Code Injection (CVE-2026-81204) IBM Langflow OSS graph construction accepts attacker-controlled node/graph definitions that can inject code during graph build due to missing execution guards and incomplete security controls. Remote exploitation enables arbitrary code execution on the Langflow host. Deployments that do not accept untrusted graphs are not impacted. 👉Affected: langflow 1.0.0-1.11.5

    Post summary

    IBM discloses a critical code injection flaw in Langflow OSS graph construction, enabling arbitrary code execution via attacker‑controlled node definitions; it affects versions 1.0.0 through 1.11.5.

    0000088
    304 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applangflowlangflow---

Explore more

Back to dashboardlangflow CVEslangflow vulnerabilities