Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.6epss 0.2%
from disclosure to weapon1 days
Published on NVDSep 14
1st PoC+1d
exploitation probability
0.2%top 84% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
IBM · Langflow OSSpublic PoCs found — 2
githubgithub.com/cflowsec/CVE-2026-12944★ 3githubgithub.com/ShadowForge-Cyber/CVE-2026-12944★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.