EXPOSURES › CVE-2026-19295
CVE-2026-19295
CRITICALAn authenticated attacker can execute arbitrary OS commands in IBM Langflow by crafting a flow type field, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy.
This RCE vulnerability allows privilege escalation from an authenticated user to arbitrary OS command execution, directly violating the principle of least privilege and enabling full system compromise. DIB organizations must patch IBM Langflow immediately and enforce strict input validation on custom component types to prevent similar bypasses. The failure stems from unpatched code that ignores policy controls, representing a severe negligence risk.
Shame score — The vulnerability bypasses an explicit policy control (LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false) and grants arbitrary OS command execution, indicating a severe design flaw that was left unpatched.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from "authenticated flow user" to arbitrary OS-level command execution under the server process identity, bypassing the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control.