CVE-2026-81211

highpriority · track · 35OT risk · elevatedEPSS 0.006 · 46 %ileDENLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.56% (46th) EPSS

CVSS 8.8 · high

Is it mine?

7 products

Check your exposure

Who says so?

3 sources

cert_bund · ncsc_nl · nvd

EPSS · scored 2026-10-27

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · psirt@us.ibm.com USexploitability 2.8 · impact 5.9

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-862USCWE-862US

affected products (7)

Products and version ranges known to be affected.

Open Source Langflow OSS <1.11.0all versionscert_bundDE
Open Source Langflow OSS <1.11.6all versionscert_bundDE
Open Source Langflow≤ OSS <1.11.0cert_bundDE
Open Source Langflow≤ OSS <1.11.6cert_bundDE
IBM IBM MQ Appliance≤ vers:unknown/*ncsc_nlNL
IBM Langflow OSS≤ vers:unknown/*ncsc_nlNL
langflow langflow1.0.0 → 1.11.6nvdUScpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0392Kwetsbaarheden verholpen in IBM Langflow OSS en IBM MQ ApplianceNL2026-09-23csaf · ncsc_nlNL
IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS.
WID-SEC-W-2026-3239Langflow OSS: Mehrere SchwachstellenDeutsch2026-09-08csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Langflow OSS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, erweiterte Berechtigungen zu erlangen oder sensible Informationen offenzulegen.

sources

Which sources assert this record, and when.

cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2026-09-10modified 2026-09-16

references (1) nvd

External citations — patches, advisories, analysis.

https://www.ibm.com/support/pages/node/7286666Vendor Advisory

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan