{
 "id": "AIR-2026-1378",
 "slug": "cve-2026-12944-ibm-langflow-oss-arbitrary-code-execution",
 "title": "CVE-2026-12944: IBM Langflow OSS Arbitrary Code Execution",
 "summary": "IBM Langflow OSS 1.0.0 through 1.10.0 allows attackers to execute arbitrary Python code with root privileges via crafted components. This enables credential theft, file exfiltration, and lateral movement within the container environment.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-09-14",
 "incident_date_precision": "day",
 "first_reported": "2026-09-14",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12944",
   "publisher": "NVD",
   "title": "CVE-2026-12944: IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the…",
   "published_at": "2026-09-14"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-12944",
  "rce",
  "langflow"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}