CVE-2026-9196: IBM Langflow OSS code execution during Agentic Assistant validation

Summary

CVE-2026-9196 affects IBM Langflow OSS 1.0.0 through 1.10.3. An authenticated attacker can execute unintended code during Agentic Assistant validation, because the application runs model-generated Python code in the backend before user approval. The source says this may allow side effects such as outbound network access, file system interaction, or data exfiltration with the privileges of the Langflow backend process. The weakness is classified as CWE-94, Improper Control of Generation of Code ('Code Injection').

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• AI agents

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News