CVE-2026-76059 Code injection in Langflow OSS
Attackers can execute arbitrary OS commands by bypassing security scanners with crafted component code, requiring immediate patching of Langflow OSS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-76059?
CVE-2026-76059 is a high-severity code injection vulnerability in Langflow Langflow, published on 10 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.
Weakness: CWE-693
Which versions are affected by CVE-2026-76059?
It affects 1 product.
Products include Langflow Langflow.
How do I fix CVE-2026-76059?
No fix has been published for CVE-2026-76059 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-76059 being exploited?
There is no known exploitation of CVE-2026-76059 in the wild and no public exploit code.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-xffc-qfh4-r9p6.