651741 matches found
EUVD-2026-113141
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104328 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
EUVD-2026-113139
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339
Langflow OSS versions 1.0.0 through 1.12.3 are affected by a critical code injection vulnerability (CVE-2026-104339). The flaw stems from the improper neutralization of special elements used in an OS command, which could allow a remote attacker to execute arbitrary code . The impact is significan...
CVE-2026-107326 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-107326
IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to OS command injection (CWE-78) due to improper neutralization of special elements used in an OS command. A remote authenticated attacker could exploit this to execute arbitrary code on the server. To remediate, IBM strongly recommend...
EUVD-2026-113138
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
EUVD-2026-113137
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization...
CVE-2026-107327 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization...
CVE-2026-107327
IBM Langflow OSS versions 1.0.0 through 1.12.4 are affected by a CRITICAL vulnerability (CVE-2026-107327 ) caused by missing authorization (CWE-862). This flaw could allow a remote authenticated attacker to execute arbitrary code on the server. To remediate this, IBM strongly recommends upgrading...
EUVD-2026-113136
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec...
CVE-2026-107328 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec...
CVE-2026-107328
IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to CVE-2026-107328 , where a remote authenticated attacker can execute arbitrary code due to improper neutralization of code in eval/exec (CWE-94). This critical vulnerability (CVSS 9.9) allows for remote code execution via network acc...
CVE-2026-107329 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
EUVD-2026-113135
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-107329
Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to a Code Injection vulnerability (CWE-94 ) that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This flaw has a CRITICAL severity (CVSS 3.1 score of 9.9 ). Remediation requires ...