CVE-2026-97674 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command 'Code Injection', aka improper control of code generation...

CVE-2026-97674

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97674 ). Due to the improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary OS commands. This flaw is categorized under CWE-94...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In OpenSSH versions prior to 10.6 , a vulnerability exists where the presence of a $ or ** character in a command-line username can lead to injection . This issue is associated with CWE-99 (Improper Control of Resource Identifiers). Exploitation details are not provided in the documents, and spec...

[SECURITY] [DSA 6548-1] node-shell-quote security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...

CVE-2026-79815

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-79803

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-102160

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

USN-8892-1 wsl-pro-service vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

CVE-2026-105841

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160

An OS command injection vulnerability exists in CloudVision CUE backup management . This flaw allows an authenticated Super User to submit a crafted backup request to execute arbitrary commands with the privileges of the affected service. The vulnerability is associated with CWE-78 (Improper Neut...

EUVD-2026-93957

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...