CVE-2026-107328

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec...

EUVD-2026-113136

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec...

CVE-2026-107328 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec...

CVE-2026-107328

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to CVE-2026-107328 , where a remote authenticated attacker can execute arbitrary code due to improper neutralization of code in eval/exec (CWE-94). This critical vulnerability (CVSS 9.9) allows for remote code execution via network acc...