CVE-2026-10134
Unauthenticated remote code execution in IBM Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.9.3 have a flaw in PythonCodeStructuredTool, a component that runs Python code in public flows. An unauthenticated attacker can exploit it to run arbitrary commands on the server, read secrets, change flows and data, reach internal services, and move to other tenants. No fixed version is listed; Rapid7 mentioned Langflow in a Metasploit Wrap Up on 2026-10-23, and it is not on CISA's known-exploited list.
IBM Langflow OSS · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 10.0 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- There is no fixed version or workaround in the available records.
- If you run IBM Langflow OSS 1.0.0 through 1.9.3, assume you are affected and watch for vendor guidance.
- Monitor Rapid7's Metasploit content for updates on Langflow.
What happened
- 23 OctRapid7's Metasploit Wrap Up mentions Langflow, MongoDB, and More.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-10134 | Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows | critical 10.0 | No | 2.3% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Rapid7 · 23 OctMetasploit Wrap Up: Langflow, MongoDB, and More ↗The records
ibm.com: advisory ↗CVE-2026-10134 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works