CVE-2026-12940CWE-78command-injection

CVE-2026-12940

Critical · published July 30, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_ENV_VARS blocklist fails to include SHELLOPTS , BASHOPTS , and PS4 environment variables.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00943 · 60.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-07-30T21:16Z
Affected products (1)
ProductVersionsFixed in
langflow/langflow≥ 1.0.0, < 1.10.21.10.2
References (1)
https://www.ibm.com/support/pages/node/7279995 · [email protected]
EPSS history
Timeline
  • 30 JUL 16:41Z
    Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints
    cvelistv5