langflow

10 records · 0 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names langflow as an affected vendor, highest CVSS first.

  1. HIGH 8.8CVE-2026-976792026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.

    langflow

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-976782026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

    langflow

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.8CVE-2026-976762026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape.

    langflow

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 8.8CVE-2026-976732026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

    langflow

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 8.8CVE-2026-976552026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.

    langflow

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 8.3CVE-2026-976802026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.

    langflow

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 8.1CVE-2026-976742026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

    langflow

    AI risk analysis on Exploit-DB.ai →

  8. HIGH 7.6CVE-2026-936782026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.

    langflow

    AI risk analysis on Exploit-DB.ai →

  9. MEDIUM 6.5CVE-2026-976712026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

    langflow

    AI risk analysis on Exploit-DB.ai →

  10. MEDIUM 4.3CVE-2026-936792026-10-07

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.

    langflow

    AI risk analysis on Exploit-DB.ai →