PT-2026-35239

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description A code injection issue exists in the Policies component's ToolGuard integration that bypasses the allow custom components=false security control. The validation mechanism only checks t...