Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-12940

1 brief RSS
critical advisory

Unauthenticated Remote Code Execution in IBM Langflow OSS

IBM Langflow OSS versions 1.0.0 through 1.10.1 are susceptible to unauthenticated remote code execution due to improper sanitization of environment variables in the MCP stdio launcher.

Langflow OSS remote-code-execution cve-2026-12940 ibm langflow
2t 1c