CVE-2026-1101869.8Critical
Langflow OSS is affected by multiple vulnerabilities
IBM · Langflow OSS
Not in CISA KEVVendor fix available
0.6%probability of exploitation in the next 30 days
49th percentile
050100
Higher than 49% of scored CVEs
9.8CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 2 Nov.
- Critical Langflow flaws expose servers to unauthenticated attacksThe Hacker News · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.