CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

EUVD-2026-94110

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-88962

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-88962 , which allows a remote authenticated attacker to execute arbitrary code. The root cause is identified as CWE-94: Improper Control of Generation of Code ('Code Injection') . Successful exploitation could lead to high-im...

CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

EUVD-2026-94112

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-93449 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

EUVD-2026-94113

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

CVE-2026-93445 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

PT-2026-107318

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper control of code generation allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-93449: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-104334: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

PT-2026-107322

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper control of code generation allows a remote authenticated attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.12.2...

Microsoft Dynamics 365 Customer Engagement Code Execution

The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

CVE-2026-104334 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-104334

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a critical vulnerability (CVE-2026-104334 ) that allows a remote attacker to execute arbitrary code. This is caused by improper control of code generation (CWE-94). The vulnerability has a CVSS base score of 9.8 , indicating a high im...

CVE-2026-105812 Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values...

CVE-2026-105812 Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values...

GHSA-5293-MQ8X-G3XJ openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

CVE-2026-105801

The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...