Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Langflow OSS — ibm.com/support/pages/node/7284733 Clear all filters
TI-2026-15739 CVE-2026-19295 · GHSA-74fg-mx2g-3cx8

Langflow is affected by multiple remote code execution vulnerabilities due to…

Priority MEDIUM 46

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wra…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01552 Published 2026-08-28 No fix listed CWE-95
TI-2026-15731 CVE-2026-19286 · GHSA-8ffw-jjx8-5788

Code injection in IBM Langflow OSS

Priority MEDIUM 50

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0086 Published 2026-08-28 No fix listed CWE-94
TI-2026-15351 CVE-2026-18729 · GHSA-q78m-9m47-w7gw

Code injection in IBM Langflow OSS

Priority MEDIUM 43

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01552 Published 2026-08-28 No fix listed CWE-94