{"data":{"id":"b9a02289-918a-4cee-a9e7-5de18f583c8d","title":"CVE-2026-12940: IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable ","summary":"IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 have a security flaw that allows attackers to run arbitrary code without authentication by injecting malicious environment variables (settings that control how programs behave) through the MCP (Model Context Protocol) launcher. The vulnerability exists because the security blocklist protecting against dangerous environment variables is incomplete, missing SHELLOPTS, BASHOPTS, and PS4.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12940","publishedAt":"2026-07-30T17:16:28.040Z","cveId":"CVE-2026-12940","cweIds":["CWE-78"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-30T17:16:28.040Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}