IBM disclosed a CVSS 9.8 remote code execution flaw in Langflow OSS versions 1.0.0 through 1.11.1, caused by improper enforcement of security restrictions on the A2A public endpoint.
What Is It
CVE-2026-19286 is a code injection vulnerability (CWE-94) in IBM Langflow OSS. According to IBM's PSIRT advisory, the product "could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint."
The CVSS 3.1 vector, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, describes the worst realistic profile for a network service: reachable over the network, low attack complexity, no privileges required, and no user interaction. Successful exploitation yields high impact to confidentiality, integrity, and availability. Base score is 9.8, rated CRITICAL.
Why It Matters
The flaw sits in Langflow's A2A public endpoint, which IBM's advisory ties to improper enforcement of security restrictions. The CVSS vector settles the access question: PR:N and UI:N mean anyone who can route packets to an affected Langflow instance can attempt code execution against it; no credentials, no phishing step, no victim interaction.
Arbitrary code execution on a Langflow host means full control of the process handling flow definitions, connected model credentials, and any data those flows touch. The CVE was published 2026-08-28 with NVD status "Received," so enrichment (CPE assignment, secondary scoring) is still pending.
What's Vulnerable
- Vendor: IBM
- Product: Langflow OSS
- Affected versions: 1.0.0 through 1.11.1 inclusive (semver range, per IBM PSIRT)
- Weakness: CWE-94; Improper Control of Generation of Code
No other IBM products are listed as affected in the supplied record.
Patch Status
The supplied source material contains no CISA KEV entry for CVE-2026-19286; there is no confirmation of active exploitation in the wild, and no KEV-mandated remediation deadline applies at this time.
The NVD record cites a single reference: IBM Support advisory node 7284733. Consult that advisory for fixed version and vendor remediation guidance; specific patch versions and mitigation steps are not included in the supplied data and are not reproduced here.
Sources
- NVD, CVE-2026-19286: https://nvd.nist.gov/vuln/detail/CVE-2026-19286
- IBM PSIRT Advisory (node 7284733): https://www.ibm.com/support/pages/node/7284733