CVE-2026-12946

Summary: IBM Langflow OSS 1.0.0–1.10.0 is affected by a vulnerability in the CUGA Component CodeAgent that permits remote code execution through improper control of user input code. The issue resides in CodeAgent’s Python code execution path, enabling an attacker (authenticated) to run arbitrary ...