{
 "id": "AIR-2026-1191",
 "slug": "cve-2026-9135-ibm-langflow-oss-code-injection-via-toolguard",
 "title": "CVE-2026-9135: IBM Langflow OSS code injection via ToolGuard dynamic fields",
 "summary": "A code injection vulnerability in IBM Langflow OSS versions up to 1.10.0 allows attackers to bypass security controls by embedding malicious Python code in dynamic CodeInput fields. The flaw enables execution of unauthorized code within the ToolGuard integration.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow"
 ],
 "incident_date": "2026-07-17",
 "incident_date_precision": "day",
 "first_reported": "2026-07-17",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9135",
   "publisher": "NVD",
   "title": "CVE-2026-9135: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a…",
   "published_at": "2026-07-17"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-9135",
  "langflow",
  "code-injection"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}