PT-2026-122444

Published

2026-06-30

·

Updated

2026-06-30

Description by

CVSS 3.1
9.9
Critical
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
GHSA-V798-MCC6-2M3M
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com