CVE-2026-19295: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in IBM Langflow OSS

CVE-2026-19295 is an improper neutralization of directives in dynamically evaluated code (Eval Injection) vulnerability in IBM Langflow OSS versions 1.0.0 through 1.11.1. An authenticated attacker can exploit this flaw by saving a flow with a crafted type field value and triggering a wrapper flow build that references it, resulting in arbitrary OS command execution under the server process identity. This effectively escalates privileges from an authenticated flow user to OS-level command execution, bypassing existing policy controls intended to prevent custom component execution.

Successful exploitation allows an authenticated user to execute arbitrary operating system commands with the privileges of the server process, leading to full compromise of the affected system. This includes potential data compromise, system manipulation, and further lateral movement within the environment. The vulnerability bypasses the LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false policy, negating intended security restrictions.

No official patch or fix is currently available for this vulnerability. Users should monitor IBM advisories for updates. Until a fix is released, restrict authenticated user access to trusted personnel only and consider additional network-level controls to limit exposure. Review and restrict the ability to save or build flows with custom components as a temporary mitigation.