PT-2026-89625 · Ibm · Langflow Oss
CVE-2026-81204
·
Publicado
2026-09-10
·
Atualizado
2026-09-11
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
🚨Critical - IBM Langflow OSS Graph Construction Code Injection (CVE-2026-81204)
IBM Langflow OSS graph construction accepts attacker-controlled node/graph definitions that can inject code during graph build due to missing execution guards and incomplete security controls. Remote exploitation enables arbitrary code execution on the Langflow host. Deployments that do not accept untrusted graphs are not impacted.
👉Affected: langflow 1.0.0-1.11.5
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Langflow Oss