---
id: CVE-2026-76059
title: >-
  IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom
  component source code could bypass the static security scanner by crafting an
  annotated class-body assignment that resolved to a dangerous callable through
  alias t…
summary: >-
  IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom
  component source code could bypass the static security scanner by crafting an
  annotated class-body assignment that resolved to a dangerous callable through
  alias t…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-693
vendor: langflow
product: langflow
affected:
  - 'langflow >= 1.0.0, < 1.11.6'
patched:
  - langflow 1.11.6
published: '2026-09-10'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T00:49:27.650'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76059'
references:
  - url: 'https://www.ibm.com/support/pages/node/7286666'
    label: psirt@us.ibm.com
tags:
  - nvd
  - cve.org
epss: 0.00676
epssPercentile: 0.50087
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-11T00:00:00+00:00'
ingestedAt: '2026-09-14T15:23:07.483Z'
---

## Overview

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the dangerous callable blocklist due to the logic error. If the crafted component reached the runtime execution path, the attacker could cause arbitrary operating system commands to execute on the server in-process, with the privileges of the running service.

## Affected

- `langflow >= 1.0.0, < 1.11.6`

## Remediation

Upgrade past the affected range:

- `langflow 1.11.6`