CVE-2026-18485

The CVE-2026-18485 affects the NI-PAL kernel driver on Windows (NI-PAL 26.3.1 and earlier). It enables a local, authenticated user to escalate privileges and execute arbitrary code. Impact is local with high confidentiality/integrity/availability implications as described in CVSS metrics. Remedia...

CVE-2026-17624

CVE-2026-17624 affects IBM Langflow OSS 1.0.0–1.10.3. A remote authenticated attacker could execute arbitrary code due to improper validation of module imports. Documented impact is HIGH (CVE base score 8.5). No exploit details are provided in the available sources. No remediation steps are speci...

CVE-2026-17624 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports...

CVE-2026-17633 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection...

CVE-2026-17633

CVE-2026-17633 affects IBM Langflow OSS 1.0.0–1.10.3. Remote authenticated attackers can execute arbitrary code due to code injection in component generation, validation, and custom component handling. Documents do not provide exploitation details or patch/version remediation; no exploitation dat...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

CVE-2026-9196 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

CVE-2026-9196

IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated code-execution risk during Agentic Assistant validation caused by improper handling of LLM-generated components. The backend may execute model-generated Python code in the validation step before user approval, enabling an attacker to t...

CVE-2026-9201

IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated arbitrary code execution vulnerability in the custom component validation mechanism. The hardening mode that restricts execution to trusted templates validates component code using a truncated SHA-256 digest, causing only a portion of ...

CVE-2026-9201 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

EUVD-2026-53572

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

CVE-2026-9201

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

CVE-2026-17625

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...

CVE-2026-10128

IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...

CVE-2026-10128

IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...

CVE-2026-10547

Summary (concrete details available) Langflow OSS versions 1.0.0–1.10.3 are affected by an ownership validation flaw in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint. An authenticated user can inject arbitrary graph data into a shared cache for any flow, enabling cross-user cache ...

CVE-2026-7869

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...

CVE-2026-7869 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...

CVE-2026-10128 Langflow is affected by weaknesses in secret handling and sensitive configuration access

IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow component to read arbitrary server environment variables, exposing sensitive secrets despite security controls intended to disable custom components...