CVE-2026-107327 is a critical (CVSS 9.9) missing-authorization flaw in IBM Langflow OSS 1.0.0 through 1.12.4 that lets a remote authenticated attacker execute arbitrary code.
What Is It
IBM's PSIRT disclosed CVE-2026-107327 on October 29, 2026. It affects IBM Langflow OSS. In the vendor's words, the product "could allow a remote authenticated attacker to execute arbitrary code due to missing authorization." The weakness is CWE-862 (Missing Authorization). The application does not check whether an authenticated user is permitted to perform the actions that lead to code execution.
NVD lists the record as "Undergoing Analysis," so NVD has not yet published its own assessment. The scoring below is IBM's.
Why It Matters
IBM rates the flaw 9.9 CRITICAL with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H:
- Network-reachable with low attack complexity
- Requires only low privileges, so any valid account is enough
- No user interaction required
- Scope changed, meaning a successful attack can affect resources beyond the vulnerable component
- High impact to confidentiality, integrity, and availability
In practice, any low-privileged user on an exposed Langflow instance could gain code execution. That makes self-registration, shared accounts, and leaked credentials direct paths to compromising the host.
As of publication, CVE-2026-107327 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. The supplied data does not confirm active exploitation.
What's Vulnerable
- Vendor: IBM
- Product: Langflow OSS
- Affected versions: 1.0.0 through 1.12.4, inclusive (semver)
The CPEs listed in the vendor data are for versions 1.0.0 and 1.12.4. The version range covers every release between them.
Patch Status
IBM's security bulletin is listed as the reference for this CVE. The supplied NVD data does not name a fixed version or specific remediation steps. Because there is no KEV entry, CISA has not set a required action or due date.
Until a fix is confirmed, organizations running Langflow OSS 1.0.0–1.12.4 should:
- Check the IBM bulletin for fixed releases and upgrade guidance
- Review who holds accounts on their Langflow instances
- Limit network exposure of the service