Langflow lets attackers run Python code as root

critical severity · published 2026-09-14

An attacker can run arbitrary Python code with root privileges on the Langflow server by submitting components that import socket or urllib. This enables AWS credential theft with full IAM role permissions, exfiltrating files from the container, and reaching internal services like PostgreSQL and Redis.

Fixed in: 1.10.1

CVE: CVE-2026-12944

Source: NVD

Am I affected?

You are affected if the installed version is older than 1.10.1. Check the version you have and update to 1.10.1 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 196 and your operating system.