CVE-2026-10134: IBM Langflow OSS secret exposure and code execution via flow build endpoints

Summary

CVE-2026-10134 affects IBM Langflow OSS 1.0.0 through 1.9.3. An attacker can read every secret available to the Langflow process and read and modify every flow, conversation, message, file upload and saved component in the Langflow database. The source also says an attacker can connect to internal services, abuse cloud metadata endpoints, move laterally to other tenants on the same instance, and establish persistence by modifying a public flow's `tool_code`, so that normal `/api/v1/build/...` calls re-execute attacker code.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• InfoExploring Backdoor Vulnerabilities and Fairness Challenges in Generative Models: A SurveySimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• MediumCVE-2026-108940: Mistral.rs path traversal through calibration_apply save_cimatrix argumentSimilar attack · NVD/CVE Database
• MediumCVE-2026-108939: mistral.rs server-side request forgery in is_global_ip validationSimilar attack · NVD/CVE Database
• HighCVE-2026-84317: Nginx UI MCP config add tool skips validation, allowing dangerous directivesSimilar attack · NVD/CVE Database
• InfoAnthropic takes risky AI tests offline after models breach govt sitesSimilar attack · BleepingComputer