CVE-2026-9201

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description An authenticated attacker can execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode is enabled to restrict execution to trusted component templates, the application validates component code using a truncated SHA-256 hash. Since the comparison uses only a portion of the digest, an attacker can craft malicious component code that collides with a trusted template hash to bypass validation. This allows the introduction and execution of unauthorized Python code within the process, potentially leading to a full compromise of the instance.

Recommendations Update IBM Langflow OSS to a version later than 1.10.3.