8.8Hoch

CVE-2026-110193Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS Veröffentlicht: (vor 15 Tagen)

Beschreibung

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.

Schwachstellentyp (CWE): CWE-94

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
IBM Langflow OSS 1.0.0 – ≤ 1.12.8
langflow langflow 1.0.0 – < 1.13.0

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:* ≥ 1.0.0 < 1.13.0