CVE-2026-9201: IBM Langflow OSS code execution via truncated hash in component validation

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain CVE-2026-9201, which lets an authenticated attacker run arbitrary code. When the optional hardening mode that restricts execution to trusted component templates is enabled, validation compares only a truncated SHA-256 hash of component code. An attacker can craft malicious component code whose truncated hash collides with a trusted template hash, bypassing the control and executing unauthorized Python code inside the Langflow process, which could lead to full compromise of the instance.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News