CVE-2026-97655

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

CVE-2026-103360

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-93445

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

CVE-2026-93448

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-104334

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-93443

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-88962

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-93447

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process...

CVE-2026-101331

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials...

CVE-2026-101329

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...

CVE-2026-104335

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...

EUVD-2026-94110

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-88962

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-88962 , which allows a remote authenticated attacker to execute arbitrary code. The root cause is identified as CWE-94: Improper Control of Generation of Code ('Code Injection') . Successful exploitation could lead to high-im...

CVE-2026-93443

IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a flaw involving the improper neutralization of special elements used in code. This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution . While no specific exploit links or scanner source co...

CVE-2026-93443 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...

CVE-2026-93448 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-93448

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a vulnerability that allows a remote authenticated attacker to obtain sensitive information . This is caused by an improper limitation of a pathname to a restricted directory (CWE-22). No specific remediation or exploit details are pr...

CVE-2026-93449 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...