Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/09/11 12:31 a.m.•13 views

EUVD-2026-75781

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS6.4AI score0.00498EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/10 10:17 p.m.•13 views

CVE-2026-81211

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS0.00498EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/10 10:17 p.m.•8 views

CVE-2026-81211

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS6.4AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 9:34 p.m.•13 views

CVE-2026-81211 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS6.6AI score0.00498EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 9:34 p.m.•46 views

CVE-2026-81211 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS0.00498EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 9:34 p.m.•45 views

CVE-2026-81211

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary Python code execution by a remote authenticated attacker. The root cause is a missing authorization check (CWE-862): the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY policy is enforced on the direct custom-component endpoint but n...

8.8CVSS6.6AI score0.00498EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•2 views

CVE-2026-81211: Missing Authorization

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

8.8CVSS6.4AI score0.00498EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•29 views

PT-2026-89628

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description Improper authorization of custom components in stored flows allows a remote authenticated attacker to execute arbitrary Python code. Recommendations Update IBM Langflow OSS to a versio...

8.8CVSS6.5AI score0.00498EPSS
SaveExploits0References6
Rows per page
Query Builder