CVE-2026-9135: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) co

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a code injection vulnerability (a type of security flaw where attackers insert malicious code) in the ToolGuard integration that allows authenticated users to bypass the allow_custom_components=false security control and execute arbitrary Python code on the backend. The vulnerability exists because the validation system only checks the main component code but misses dynamic CodeInput fields, and attackers can exploit this by embedding malicious code in these unvalidated fields that get executed when tools are invoked. The flaw can be made worse through cross-tenant flow manipulation (exploiting flows across different user accounts) when certain security settings are misconfigured.