IBM has disclosed CVE-2026-107329, a critical (CVSS 9.9) code injection flaw in Langflow OSS versions 1.0.0 through 1.12.4. According to NVD, the flaw could allow a remote attacker with low-privilege authenticated access to execute arbitrary code.
What Is It
CVE-2026-107329 is an improper control of code generation weakness (CWE-94, code injection) in IBM Langflow OSS. NVD says the flaw "could allow a remote authenticated attacker to execute arbitrary code." IBM's PSIRT ([email protected]) reported it, and NVD published the record on 2026-10-29. The record's status is still "Undergoing Analysis," so NVD has not yet completed its own enrichment.
Why It Matters
IBM's CVSS v3.1 base score is 9.9 (CRITICAL), with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. In practice that means:
- Network-reachable: an attacker can exploit it remotely.
- Low complexity: no special conditions are needed.
- Low privileges: a basic authenticated account is enough.
- No user interaction: no victim has to click or open anything.
- Scope changed: the impact can reach past the vulnerable component.
- High impact on confidentiality, integrity and availability.
Because the vector requires only low privileges, any valid account may be a possible way in. That could include a compromised or self-registered account if your deployment allows sign-ups. Successful exploitation could result in arbitrary code execution.
Exploitation status: CVE-2026-107329 is not in the CISA Known Exploited Vulnerabilities (KEV) catalog, so KEV does not confirm active exploitation. No CISA required action or due date applies.
What's Vulnerable
- Vendor: IBM
- Product: Langflow OSS
- Affected versions: 1.0.0 through 1.12.4 inclusive (semver)
- CPEs listed:
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*
All releases from 1.0.0 to 1.12.4 should be treated as vulnerable.
Patch Status
The NVD record does not name a fixed version. It points to an IBM support advisory (node 7293016), which is the authoritative source for remediation guidance. Defenders should:
- Read the IBM advisory and apply the remediation IBM specifies.
- Inventory Langflow OSS deployments running 1.0.0 through 1.12.4.
- Until a fix is in place, review who has authenticated access to Langflow instances, since exploitation needs only low-privilege credentials.
There is no CISA KEV remediation deadline, because the CVE is not currently listed.