Vulnerability intelligence

CVE-2026-10561

IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise

CVSS Score

Critical

EPSS — Exploit Probability

0.9%

Riskier than 57% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jun 25, 2026 · latest Jun 25, 2026

Coverage timeline

Critical IBM Langflow flaws let attackers run code remotely
securityonline.info · Jun 25, 2026