CVE-2026-9196

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description An authenticated attacker can execute unintended code during Agentic Assistant validation because the application improperly handles LLM-generated components. The system executes Python code generated by the model in the backend during the validation process before the user provides approval. This can lead to side effects such as unauthorized outbound network access, file system interaction, or data exfiltration, operating with the privileges of the Langflow backend process.

Recommendations Update IBM Langflow OSS to a version later than 1.10.3.