IBM Langflow OSS 1.0.0: remote code execution

IBM Langflow OSS

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Do this now

Check the vendor advisory for a fixed version before you assume one exists.

Still cooking for Langflow OSS.

First seen: 4 Nov 2026
Last update: 4 Nov 2026, 07:17 UTC
Identifiers: CVE-2026-110186
CVSS: 9.8
Source: news
On the menu as: LLM gateways

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## IBM Langflow OSS 1.0.0: remote code execution
Severity: critical. Patch status: fix status unknown.
Affected: IBM Langflow OSS
Ids: CVE-2026-110186

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

## Steps
1. This incident involves a provider (ai-gateways). Search config, CI and env templates (.env.example, wrangler.toml, vercel.json, terraform, workflow secrets) for credentials stored there. List each secret by name, where it is used, and how to rotate it. Never print secret values.
2. Fix by release line: Langflow OSS: <= 1.12.8 → upgrade to 1.13.0 or above (the CVE record's solution).

## Fix by release line
| Line | State | Fix | Until then |
|---|---|---|---|
| Langflow OSS <= 1.12.8 | migrate | move to 1.13.0 | restrict network access to it |

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-110186") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://nvd.nist.gov/vuln/detail/CVE-2026-110186 https://www.ibm.com/support/pages/node/7294467
https://pwned.coffee/i/ibm-langflow-oss-1-0-0-remote-code-execution-cve-2026-110186

Receipt

Exploitation: No known exploitation
Fix by release line: Product Affected Fixed in Source
Langflow OSS <= 1.12.8 upgrade to 1.13.0 or above (the CVE record's solution) CVE record (CNA) checked 4 Nov
Score: CVSS 9.8 (critical). CVSS 3.1 9.8 (CNA ibm) for CVE-2026-110186
Last checked: 4 Nov 2026, 08:18 UTC

Product	Affected	Fixed in	Source
Langflow OSS	<= 1.12.8	upgrade to 1.13.0 or above (the CVE record's solution)	CVE record (CNA) checked 4 Nov

Sources: KEV – CVE record ✓ Vendor ✓

Sources

Totalone very hot coffee