AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-12940

IBM Langflow OSS: remote code execution

IBM

CVE-2026-12940 · Published Jul 30, 2026 · updated Aug 4, 2026

Critical9.8
No fix yet
IBM advisory

IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_ENV_VARS blocklist fails to include SHELLOPTS , BASHOPTS , and PS4 environment variables.

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.10.1No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More IBM advisories

All IBM
High 8.5Jul 30IBM WebSphere Application Server: remote code executionCVE-2026-11536no fix yetCritical 9.9Jul 30IBM Langflow OSS: code injectionCVE-2026-12946no fix yetMedium 4.3Jul 30UCD - IBM: information disclosureCVE-2026-10569no fix yetCritical 9.9Jul 30IBM Langflow OSS: improper input validationCVE-2026-13435no fix yetHigh 8.1Jul 30IBM Langflow OSS: attacker could access another user's private vectorCVE-2026-13444no fix yetHigh 7.5Jul 30IBM Langflow OSS: path traversalCVE-2026-12942no fix yet