PT-2026-107322 · Ibm · Langflow Oss

CVE-2026-93449

·

Published

2026-10-07

·

Updated

2026-10-07

CVSS v3.1

8.5

High

VectorAV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2
Description Improper control of code generation allows a remote authenticated attacker to execute arbitrary code.
Recommendations Update IBM Langflow OSS to a version later than 1.12.2.

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-93449

Affected Products

Langflow Oss