CVE-2026-1101938.8High
Langflow OSS is affected by multiple vulnerabilities
IBM · Langflow OSS
Not in CISA KEVVendor fix available
0.8%probability of exploitation in the next 30 days
55th percentile
050100
Higher than 55% of scored CVEs
8.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
Coverage1 article · 1 outlet
First in our coverage: The Hacker News, 2 Nov.
- Critical Langflow flaws expose servers to unauthenticated attacksThe Hacker News · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.