High severity8.8NVD Advisory· Published Sep 10, 2026· Updated Sep 16, 2026
CVE-2026-81211
CVE-2026-81211
Description
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 1.0.0 - 1.11.5
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7286666nvdVendor Advisory
News mentions
3- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreThe Hacker News · Oct 19, 2026
- IBM: 25 Vulnerabilities Across Db2, Langflow OSS, and DataStage Disclosed TogetherVypr Intelligence · Sep 10, 2026
- IBM Langflow OSS: Batch of 18 Vulnerabilities Disclosed, Including Critical Code Execution FlawsVypr Intelligence · Sep 10, 2026