Code Execution Vulnerability in IBM Langflow Application

CVE-2026-9196

What is CVE-2026-9196?

The IBM Langflow application, versions 1.0.0 through 1.10.3, is susceptible to a code execution vulnerability that arises from improper handling of components generated by large language models (LLMs). This flaw enables an authenticated attacker to execute unintended Python code on the backend during the validation phase of the Agentic Assistant feature. The backend execution prior to user approval can lead to unwanted consequences, allowing malicious actors to gain unauthorized access to the network, manipulate the file system, or exfiltrate sensitive data while operating with the elevated privileges of the Langflow backend process.

References