116993 matches found
CVE-2026-47184
creationtimestamp| type| source ---|---|--- 2026-07-17 20:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquk3hsae622...
EUVD-2026-45306
IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...
CVE-2026-49835
creationtimestamp| type| source ---|---|--- 2026-07-17 19:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujrdmq7p2i...
CVE-2026-49834
creationtimestamp| type| source ---|---|--- 2026-07-17 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujodq3y72b...
CVE-2026-7667
creationtimestamp| type| source ---|---|--- 2026-07-17 19:51:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujlirgex2i 2026-07-18 15:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtcd3jt2f 2026-07-21 10:07:06+00:00| seen|...
CVE-2026-49284
creationtimestamp| type| source ---|---|--- 2026-07-17 19:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujisgyt52s...
CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
EUVD-2026-45265
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-50289
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-12691
creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...
CVE-2026-63101
creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...
CVE-2026-7755
The IBM Security Bulletin confirms CVE-2026-7755 affects Langflow OSS versions 1.0.0–1.10.0, where the File Manager API may bypass MCP server configuration validation during file uploads. A maliciously crafted MCP configuration file (e.g., mcp_servers .json) could be uploaded via upload_user_file...
CVE-2026-56453
creationtimestamp| type| source ---|---|--- 2026-07-17 19:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquhpb2hr72j...
CVE-2026-8476
Langflow OSS versions 1.0.0–1.10.0 are impacted by a remote code execution vulnerability in the disk-based cache. The AsyncDiskCache deserializes cached items with unsafe pickle.loads() without validation, allowing arbitrary code execution when an attacker can influence cached data (e.g., through...
CVE-2026-8481 Remote Code Execution via Code Validation Endpoint
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...
CVE-2026-15343
creationtimestamp| type| source ---|---|--- 2026-07-17 19:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquh5izcym2b...
CVE-2026-57860
creationtimestamp| type| source ---|---|--- 2026-07-17 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o 2026-07-19 08:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f...
CVE-2026-8859 Path Traversal in APIRequest Component via Content-Disposition Header
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...