IBM disclosed a critical (CVSS 9.8) OS command injection flaw in Langflow OSS versions 1.0.0 through 1.11.5 that lets an unauthenticated remote attacker execute arbitrary operating system commands.
What Is It
CVE-2026-79724 is an improper neutralization of special elements used in an OS command (CWE-78) affecting IBM Langflow OSS. Per IBM's advisory, the flaw "could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command."
The CVSS 3.1 vector, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, describes the worst realistic case for a network-facing service: reachable over the network, low attack complexity, no privileges, and no user interaction required, with high impact to confidentiality, integrity, and availability. Exploitability scores 3.9 out of a possible 3.9; impact scores 5.9.
Why It Matters
Command injection with no authentication and no user interaction collapses the distance between "exposed to the network" and "code execution as the service account." An attacker who reaches an affected Langflow OSS instance can run commands on the host; the standard precursor to credential theft, lateral movement, and persistence.
CVE-2026-79724 does not appear in CISA's Known Exploited Vulnerabilities catalog as of 2026-09-10, so active exploitation is not confirmed at this time. That is not a reason to defer patching a 9.8 with a public advisory.
What's Vulnerable
- Vendor: IBM
- Product: Langflow OSS
- Affected versions: 1.0.0 through 1.11.5 inclusive (semver range)
- CPEs:
cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*,cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
Patch Status
The record was published 2026-09-10 with NVD status Received, meaning NVD enrichment is still pending; CVSS and CWE data shown here come from IBM PSIRT as the primary source. Neither the NVD record nor IBM's advisory text names a specific fixed version, and because the CVE is absent from the CISA KEV catalog, no federal remediation deadline applies to it under BOD 22-01. IBM's support bulletin (linked below) is the authoritative source for remediation guidance; operators running any version in the 1.0.0–1.11.5 range should consult it directly and restrict network exposure of Langflow instances in the interim.
Sources
- IBM Support Bulletin; https://www.ibm.com/support/pages/node/7286666
- NVD, CVE-2026-79724, https://nvd.nist.gov/vuln/detail/CVE-2026-79724
- CISA Known Exploited Vulnerabilities Catalog; https://www.cisa.gov/known-exploited-vulnerabilities-catalog