{"data":{"id":"a7c0078b-8b8a-438b-891d-5e5d9b39759a","title":"CVE-2026-12944: IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0)…","summary":"IBM Langflow OSS versions 1.0.0 through 1.10.0 can let attackers run arbitrary Python code with root privileges (UID=0) on the Langflow server. Attackers do this by submitting components that contain socket or urllib imports. The flaw enables AWS credential theft via IMDSv1 SSRF with full IAM role permissions, arbitrary file exfiltration from the container filesystem, and lateral movement to internal services such as PostgreSQL and Redis within the Docker network. The scanner also incorrectly returns \"validated\": true, which gives a false security signal.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12944","publishedAt":"2026-09-14T22:16:56.950Z","cveId":"CVE-2026-12944","cweIds":["CWE-918"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS arbitrary Python code execution via components","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00386,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-277g-2342-m332"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T00:10:47.745Z","patchAvailable":null,"disclosureDate":"2026-09-14T22:16:56.950Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}