CrowdSecLive Exploit Tracker
Insufficient DataCVE-2026-93674Public Exploit

Langflow OSS - RCE (CVE-2026-93674)

PublishedOct 7, 2026
First SeenOct 21, 2026
Last Seen
Reported
CVSS9.8
IBM
IBMLangflow OSS
ai_mcpweb_application

Description

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

psychologyCrowdSec Analysis

CVE-2026-93674 is a critical OS command injection vulnerability affecting IBM Langflow OSS versions 1.0.0 through 1.12.2. Remote unauthenticated attackers could exploit improper handling of special command elements to execute arbitrary code, potentially compromising system confidentiality, integrity, and availability.

CrowdSec has been tracking this vulnerability and its exploits since 20th of October 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2026-93674 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers target Langflow’s /api/v1/auto_login, /api/v1/custom_component, and /api/v1/validate/code endpoints to obtain a JWT, plant a Python module, and trigger its import. The crafted import can execute code on the server, leading to remote command execution.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2026-10-07
Rule Released2026-10-20

Related Weaknesses

CWE-94: Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References