CVE-2026-12944
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
Description
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.
INFO
Published Date :
Sept. 14, 2026, 9:30 p.m.
Last Modified :
Sept. 14, 2026, 9:30 p.m.
Remotely Exploit :
Yes !
Source :
ibm
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | CRITICAL | 9a959283-ebb5-44b6-b705-dcc2bbced522 |
Solution
- Update IBM Langflow OSS to the latest version.
- Remove untrusted or vulnerable components.
- Implement network segmentation.
- Restrict access to internal services.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-12944 vulnerability anywhere in the article.