CVE-2026-78571 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input...

CVE-2026-78575

IBM Langflow OSS 1.0.0–1.11.5 is vulnerable to OS command injection (CWE-78) in the MCP stdio server configuration , allowing a remote authenticated attacker to execute arbitrary commands. The root cause involves two gaps: the MCP stdio validator on Windows recognizes only one cmd.exe execution s...

CVE-2026-79724

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an OS command injection vulnerability (CWE-78) caused by multiple incomplete code security controls and missing execution guards, including an incomplete denylist omitting process-spawning primitives, a logic error in the code scanner...

CVE-2026-81213 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs...

CVE-2026-84889 A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

CVE-2026-84889

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a path traversal vulnerability (CWE-22) in two independent file handling mechanisms. First, the file upload endpoint accepted multipart filenames from HTTP request metadata without sanitization, allowing directory traversal sequences in the C...

CVE-2026-85025

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls...

EUVD-2026-75723

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

LibPNG_OSS-Fuzz

libpng 的模糊测试与漏洞分析 小组安全研究项目 关于模糊测试： 模糊测试是一种自动化软件测试技术，向程序提供无效、意外或随机数据，以发现缺陷和漏洞。导向覆盖的模糊测试利用代码覆盖反馈，智能地探索不同的执行路径。 关于 OSS-Fuzz： OSS-Fuzz 是 Google 针对开源软件的持续模糊测试服务。它使用 LibFuzzer 及其他模糊测试引擎，自动测试关键开源项目并报告漏洞。 本项目演示了使用 Google 的 OSS-Fuzz 框架对 libpng 库进行导向覆盖的模糊测试、代码覆盖分析及漏洞利用。 目标： libpng v1.6.48（模糊测试）、v1.5.20（漏洞利...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. 系统分析 识别攻击面 从环境中正在运行的内容开始。我列出所有活动的容器： root@kitploit: docker ps 受害者暴露了一个端口：8086。 目前，我没有关于目标的详细信息。从 docker ps 输出中，系统仅对外暴露了一个值得注意的服务，端口为 8086，映射到容器内部的服务。这是需要分析的主要攻击面。 我们不立即通过浏览器访问它，而是使用 Nmap 对服务进行指纹识别，确定 8086 端口上运行的服务： nmap -sV -sC -p 8086 192.168.3.137 扫描结果显示，8086 端口是 InfluxD...

PT-2026-89610

🚨 CVE-2026-76059 IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never check...

PT-2026-89612

🚨 CVE-2026-78571 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input. 🎖@cveNotify...

PT-2026-89619

🚨 CVE-2026-79742 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist. 🎖@cveNotify...

PT-2026-89631

🚨 CVE-2026-81268 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation. 🎖@cveNotify...

PT-2026-89645

🚨 CVE-2026-84889 IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory. 🎖@cveNotify...

PT-2026-89611

🚨 CVE-2026-78569 IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner. 🎖@cveNotify...

PT-2026-89628

🚨 CVE-2026-81211 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows. 🎖@cveNotify...

PT-2026-89637

🚨 CVE-2026-81941 IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local std...

PT-2026-89617

🚨 CVE-2026-79724 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command. 🎖@cveNotify...

PT-2026-89636

🚨 CVE-2026-81940 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. 🎖@cveNotify...