CVE-2026-93675

Langflow dependency confusion can enable code execution

IBM · Langflow OSS

First documented disclosure · Review checkpoint

Summary

IBM reports a dependency-confusion condition that could allow remote code execution.

Severity and exploitation evidence

High · 8.8/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources do not establish malicious exploitation. A published proof of concept is not evidence of a customer compromise.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Unexpected dependency resolution violates the intended trust boundary.

Conditions required

The vendor CVSS requires user interaction; detailed attack prerequisites are not published in the reviewed bulletin.

Potential impact

Potential compromise of code execution, service data and availability.

Affected versions and configurations

1.0.0 through 1.12.2.

Fix and mitigation status

1.12.3.

Practical next steps

Upgrade to at least 1.12.3 and review package-source and dependency policies.

Operating lesson

Control where agent-platform dependencies are obtained and how they are verified.

Evidence and limits

The bulletin is dated October 2; the CVE record followed October 7. Public technical detail is limited, so no more specific exploit chain is asserted.

Sources