cvedb.io
CVE-2026-10561
CRITICAL · CVSS 10
EPSS exploitation probability: 0%
Published 2026-06-22T14:16:25.023 · Last modified 2026-06-26T20:19:05.520

Summary

IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise

Affected products

langflow — langflow

Does this affect you?

Add your gear to cvedb and we'll alert you only when langflow ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.