CVE-2026-12944

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0

Description An incomplete security scanner blocklist allows attackers to execute arbitrary Python code with root privileges (UID=0) on the server by submitting components that import socket or urllib. This bypass results in the scanner incorrectly returning a validated: true signal. Successful exploitation enables Server-Side Request Forgery (SSRF) via IMDSv1 to steal AWS credentials with full IAM role permissions, arbitrary file exfiltration from the container filesystem, and lateral movement to internal services such as PostgreSQL and Redis within the Docker network.

Recommendations Update IBM Langflow OSS versions 1.0.0 through 1.10.0 to a newer version.