CVE-2026-85025Disclosure(langflow / langflow)

LOWCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch langflow langflow systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.

langflow CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.ibm.com/support/pages/node/7286666

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

langflow

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-11); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

langflow

Products

langflow

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Disclosure

360.0%

General

120.0%

Patch

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-11	2	Disclosure1General1
2026-09-12	2	Disclosure2
2026-09-23	1	Patch1

Full discourse5 posts

Upwind Security MDR@UpwindMDR45d
Disclosure
🚨Critical - IBM Langflow OSS Unauth RCE via Public MCP Project Endpoints (CVE-2026-85025) Langflow OSS improperly enforces public-flow restrictions on publicly shared MCP project endpoints, allowing unauthenticated access to/modify chat sessions. By abusing weak session isolation, attackers can pivot from public project access into arbitrary code execution on the server. 👉Affected: IBM Langflow OSS langflow 1.0.0-1.11.5 | Upgrade to: 1.11.6+.
Post summary
IBM Langflow OSS versions 1.0.0‑1.11.5 are vulnerable to unauthenticated RCE via weak session isolation on public MCP project endpoints; users should upgrade to 1.11.6 or later.
10000119
304 followersView on X
Nxploited@Nxploited45d
General
#RCE | CVE-2026-85025 CVE-2026-79724 CVE-2026-81204 #Exploit #hacker https://t.co/WYzOqknNCx
Post summary
The tweet lists several CVE identifiers with RCE and exploit tags but provides no additional technical or actionable information.
00010141
125 followersView on X
zoomeyebot@zoomeyebot33d
Patch
🚨 IBM Patches Critical Langflow OSS Remote Code Execution Flaws (CVE-2026-79724, CVE-2026-85025, CVE-2026-81204) Critical Vulnerability Alert! IBM Langflow OSS is affected by CVE-2026-79724. 🔍 Identify Targets via ZoomEye: Search Dork: app="Langflow" Exposure: 18.6k instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJMYW5nZmxvdyI%3D #Langflow #CVE202679724 #RCE #IBM
Post summary
IBM has released patches for critical RCE vulnerabilities (CVE‑2026‑79724, CVE‑2026‑85025, CVE‑2026‑81204) affecting Langflow OSS, with roughly 18.6k exposed instances worldwide; organizations should apply the updates promptly.
0000035
24 followersView on X
Cybersecurity News DE@cybsecuritynews44d
Disclosure
#schwachstellen IBM Langflow OSS: Kritische Lücke erlaubt Codeausführung ohne Anmeldung #cve202685025 #ibm #langflowoss https://cybersecurity-news.de/cve-2026-85025-ibm-langflow-oss-codeausfuehrung-ohne-login
Post summary
The tweet announces a critical vulnerability (CVE‑2026‑85025) in IBM Langflow OSS that permits code execution without authentication, but provides no evidence of active exploitation, PoC, or fixes.
0000042
12 followersView on X
ThreatAft@ThreatAft46d
Disclosure
🚨 IBM LANGFLOW OSS — 12 CRITICAL CVEs, CVSS 9.8 EACH CVE-2026-85025: MCP endpoint auth bypass → RCE CVE-2026-79724: OS command injection Affected: 1.0.0-1.11.5 Fixed: 1.11.6 → https://threataft.com/articles/ibm-langflow-oss-cve-2026-85025-12-critical-rce-flaws #Langflow #IBM #CVE #RCE #CVSS9 #PatchNow #ThreatIntel
Post summary
The tweet announces 12 critical vulnerabilities in IBM Langflow OSS, lists affected and patched versions, provides a link to a detailed article, and urges immediate patching.
0000065
43 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	langflow	langflow	-	-	-

Explore more

Back to dashboard langflow CVEs langflow vulnerabilities

What researchers are saying

CVE-2026-85025

Upwind Security MDR[verified]@UpwindMDRDisclosure

IBM Langflow OSS versions 1.0.0‑1.11.5 are vulnerable to unauthenticated RCE via weak session isolation on public MCP project endpoints; users should upgrade to 1.11.6 or later.

zoomeyebot[verified]@zoomeyebotPatch

IBM has released patches for critical RCE vulnerabilities (CVE‑2026‑79724, CVE‑2026‑85025, CVE‑2026‑81204) affecting Langflow OSS, with roughly 18.6k exposed instances worldwide; organizations should apply the updates promptly.

Nxploited@NxploitedGeneral

The tweet lists several CVE identifiers with RCE and exploit tags but provides no additional technical or actionable information.

Cybersecurity News DE@cybsecuritynewsDisclosure

The tweet announces a critical vulnerability (CVE‑2026‑85025) in IBM Langflow OSS that permits code execution without authentication, but provides no evidence of active exploitation, PoC, or fixes.

ThreatAft@ThreatAftDisclosure

The tweet announces 12 critical vulnerabilities in IBM Langflow OSS, lists affected and patched versions, provides a link to a detailed article, and urges immediate patching.