IBM dropped 19 Langflow CVEs in one batch. Nine score 9.8–9.9. All are RCE.
The frame that matters: Langflow *is* code execution. Every auth control is a gate in front of exec(). Nine gates failed. Four failure modes: absent gate (unauth RCE), too-narrow gate (missing authz), wrong-place gate (eval/exec injection), wrong-thing gate (code-gen control).
Patch target: 1.13.0. Earlier fixes at 1.12.4 and 1.12.5 don't cover the full batch.
https://threataft.com/articles/langflow-oss-mass-disclosure-19-cves-2026
ThreatAftLangflow OSS: 19 CVEs, Nine 9.8+ RCEs | ThreatAftIBM filed 19 Langflow OSS CVEs in one batch. Nine score 9.8–9.9. The same architectural flaw—unsandboxed code execution—produces every one of them.