---
id: CVE-2026-12944
title: >-
  IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary
  Python code with root privileges (UID=0) on the Langflow server by submitting
  components containing socket or urllib imports
summary: >-
  IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary
  Python code with root privileges (UID=0) on the Langflow server by submitting
  components containing socket or urllib imports. This enables: (1) AWS
  credential…
severity: critical
cvss: 9.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N'
cwe:
  - CWE-918
vendor: IBM
product: Langflow OSS
affected:
  - langflow_oss >= 1.0.0 <= 1.10.0
published: '2026-09-14'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T19:21:55.793'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-12944'
references:
  - url: 'https://www.ibm.com/support/pages/node/7278919'
    label: psirt@us.ibm.com
tags:
  - nvd
  - exploit-available
  - cve.org
epss: 0.00393
epssPercentile: 0.30648
exploits:
  github: 2
  githubRepos:
    - 'https://github.com/cflowsec/CVE-2026-12944'
    - 'https://github.com/ShadowForge-Cyber/CVE-2026-12944'
  checkedAt: '2026-09-25T08:20:49.842Z'
exploitAvailable: true
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-15T17:45:47.753535Z'
ingestedAt: '2026-09-14T22:16:09.893Z'
---

## Overview

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.