CVE-2026-12946 Remote Code Execution in CUGA Component CodeAgent

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

CVE-2026-12946

Summary: IBM Langflow OSS 1.0.0–1.10.0 is affected by a vulnerability in the CUGA Component CodeAgent that permits remote code execution through improper control of user input code. The issue resides in CodeAgent’s Python code execution path, enabling an attacker (authenticated) to run arbitrary ...

EUVD-2025-135027

Malicious code in unimuna-safiagiaf-cuga npm...

EUVD-2025-135028

Malicious code in unimuna-safiagiaf-cuga npm...