CVE-2026-19295: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in IBM Langflow OSS

CVE-2026-19295 is an improper neutralization of directives in dynamically evaluated code (Eval Injection) vulnerability in IBM Langflow OSS versions 1.0.0 through 1.11.1. An authenticated attacker can exploit this by saving a flow with a crafted type field value and triggering a wrapper flow build, resulting in arbitrary OS command execution within the server process. This bypasses the intended LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy control, allowing privilege escalation from an authenticated flow user to full OS-level command execution under the server process identity.

Successful exploitation allows an authenticated attacker to escalate privileges and execute arbitrary operating system commands on the server hosting IBM Langflow OSS. This can lead to full compromise of the server process, including confidentiality, integrity, and availability impacts. The vulnerability bypasses existing policy controls designed to restrict custom component execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user permissions and monitor for suspicious activity related to flow creation and wrapper flow builds. Do not rely solely on the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy as it can be bypassed by this vulnerability.