CVE-2026-85025 — Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing exec…

CVE-2026-85025

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.11.5

CWE

CWE-863

References

https://www.ibm.com/support/pages/node/7286666

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.