What’s Vulnerable › Vulnerabilities
CVE-2026-12944: Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
- Severity: critical (CVSS 9.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-14 · updated 2026-09-16
- Weakness: CWE-918
Description
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.
Affected products
- IBM Langflow OSS: from 1.0.0 through 1.10.0
References
Get alerted when CVE-2026-12944 or the next vulnerability affects your stack