HighVulnerability
CVE-2026-76059: IBM Langflow OSS static security scanner bypass allowing command execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-76059
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
IBM Langflow OSS versions 1.0.0 through 1.11.5 contain a flaw in the static security scanner for custom component source code. A crafted annotated class-body assignment resolves to a dangerous callable through alias tracking, and the resolved value is never checked against the blocklist because of a logic error. If the component reaches the runtime execution path, an attacker can run arbitrary operating system commands on the server in-process, with the privileges of the running service.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
- MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database