CVE-2026-1043399.8Critical
Langflow OSS is affected by multiple vulnerabilities
IBM · Langflow OSS
Not in CISA KEVVendor fix available
0.8%probability of exploitation in the next 30 days
54th percentile
050100
Higher than 54% of scored CVEs
9.8CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 2 Nov.
- Critical Langflow flaws expose servers to unauthenticated attacksThe Hacker News · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.