CVE-2026-110193: IBM Langflow OSS Agentic Assistant can be made to generate or submit code that runs operating system commands
The National Vulnerability Database (NVD) record says IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code that results in arbitrary operating system command execution on the server.
The record
- Kind
- Vulnerability
- Source record
- CVE-2026-110193: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated accoun (National Vulnerability Database record)
- Record published
- 2026-10-29
- Posted here
- 2026-10-30
- World
- Software agents · Enterprise work agents
- Controls concerned
- Pre-execution validation C-D1; Containment and isolation C-E5
- Checked
- Checked against its record on 2026-10-30 by a reader who did not draft it; report
verification/reports/SIG-2026-10-30-002-2026-10-30.md.
A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.
What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.
New signals like this, once a week. A short email when a case, signal or rule touches software agents. Free; unsubscribe in one click.
Get the weekly emailNewer: CVE-2026-119050: Agno PandasTools lets prompt injection make the agent call arbitrary pandas functions, including reading pickle files for code execution
Older: GHSA-7w82-6f9j-v9jp: mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths